MAL-2025-171395 Malicious code in jagdeepsingh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ae0379b5809a22226fc33fbe27db90920105d77ecba9cb7a8663cf60c4865ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171410 Malicious code in jawadali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a12931ff6ef796b7c66deacf1493493323ac1e9057113812a37a1c266bf980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171885 Malicious code in solarhunter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e10b585375075d5201fca3f4d9769a85ad04a6ce420170e1515992854ef5764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172033 Malicious code in yusufputra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdac70bcd90ae98e8f37ea724bd7e54d98be02edd5a9cbd0a9a28d2e2519d04f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171913 Malicious code in spacetraveler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b3555b6d60e5004c85ce0e607e6e1173a7d00c11f875b91f81709f50ba9ac28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170760 Malicious code in akbarmunir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afb2fce6918fc4c09dde9875e133bffc783d3b40038f3f8cb7c39bd6bc8c00c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonipopi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcb9323644aeae8420b9d60b9cf12d12727ee7b690359e12877e6203323b7732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shakiranwar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73b471e670d580673d81738cceb5776f741a564ef53c571de8acad89314a4433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ac7324cb238a16750e67b21c2fec9b2fe6eed5a8c14460ba57de59ef814bf25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8496289c81ce27b027473de349ecdeaf3435aa7c4b264b2752e8beac172f697 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabuvaua-nalui-lunbisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487f826df0c57c77e75e19cb49cad1b189a2611ce8916f578e8bb40e32064ce9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be2f7a059cdb361ee7ed3e8b5dc4f125b7bfb676a199bcd0b0af198753ae4899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makanabi-aibba-uf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f2eb1ae3f5c2c67911542bfe634a0a8c7828e6ff01d08c9189b296212a201b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-ota-uofigapffuto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d65df92dbdb14ffc3355380146b1b93ba86ac360c56a0ed5b9c92a81edc364d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciaiaggu-idaatqft-fafugofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43287bf81090da3cdc6fd52a3f7bb5bd863709d846538ab2ae75a71b979a124b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dd2228ab215ce256c0240c622ed5957aafc0dafccec808e0d7730bf2c29cdc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db351ab272ac72324899fca32a4735267373713751f8cc8927f3fb27d7ac7a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lukoki-natbaabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86132a2adb0e5f05049b558ad451409135b1af1dd5435b4d452f57cb8b87f66b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba4eb22763416f5dbaf2ed2e8833eed84c75b33ba9f2d637a5ed039580da25a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-lady10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9299e68678dfe5a2523432da993504e02bf503a27761a4912238a11dfc61068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...