MAL-2025-170802 Malicious code in ameenasif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d01a09a81a49106ef81273b5fe79cbc12ac65ed9b679c9d34c1f2526826c4b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171097 Malicious code in declanmccarthy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c45e98fd36536acae1176a359c442a56babdbcd4afc740b8c59c0bf71853bb00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-fragis-oguda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f677274bbc8defa0a6835dea53eea673587efe6f75dbed13c5ce2ac03efed00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losiat-dilakabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d47b1a15bd8617911ccdaf8c432e9028d6df164f7267ba437c4e2fca523d067f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c719a42501da37e9f8a06473a28885d0b0b6b4a3ddc7d36b1e8e884ffbab3553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-molipe-aramisiia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9552ad86ee336ed8104f4309adedf4331b0c71aff6d910576cafee0a8d3937e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in samehada-aazs-r7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68927e2f0e9d7f209bacec1135dae53e5551c2a681e46e246c5a02eaf48b56a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iqbal-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f64c71fb51eb821fe7fd9d831cf7dcda7b4a63af671b445fb2b9307dfeaf60e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/irdis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34942ff16455aabea9f3b1638942b775d13df872397e5202400600f53786e917 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aviah-afigagiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d52e51c718f9ab3cf8c0e2241795cc6fffef44e6a20104ee9bb01e5edbbfa36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b97ef8ec6f9b31e1f787cbe8cb9f8c53d8e594c5a37767fd0f33b50b69347843 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1d7dba0c2d19f614d4602fdd772a691deb793a5f470d9f5bf9a111d9f36221c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f1dc9319375a8aa56a499c59b5d7a852425c65b46a61ff9455aa5a05580117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abeh-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e7ec35bbbdafae3b125ea464ca57c960e8c21d48d128d25871abdc6c803b55a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b6d50ff37375b2aa80fff5006c99ad0efe8a24e941b7835702effd3fd2c8dba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90021c8da03f3f619ef1b6cdba58ea0f555e3eb28cfdcaed22cb987583398b54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimon-gog0gnmai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3436ac227b1498e1c36d305aa9875c9869973961c7bdc5cffd1aeedcdbac47af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arhani30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dcd36820c08cfe1a381ac49083be86800eebaf2961f9fc2f26635a78eadd802 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tobrut-naughty-nubliesp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15a181a3ab4dba979530f420a786f064ceb158cc906e5cac6fd72d8bf8388c10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a4cf65e61530a1fd30461bce6f508e8dc64711be074ccf811c3751477f74e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...