MAL-2025-171060 Malicious code in constellationcarver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8d7bde36eb802242f434706133623be3fcd84348f3a7fc3fe3a14f38acb9dd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171842 Malicious code in sego-goreng (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 842ccfc02ce987a883d1c35bb63c9ecfb96d7dd7b350edc5a4fc38d2bcfd016d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28528fb8796ad9e990a1c3191a89ac0b4025525762289760ca8afe2530457170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bufpani-muisyau-fanafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a5b2c657cb1f4a0b279807bbef0428e83e21534667d7ac4d3bd763ee15722f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43a7656844e71cbb0117291d942d529dfce370ce73d2f46f198386aebeec4413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagiaas-fimoka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 720c8aa669f8edd34b04affd51407c4aa96492193ae27aba7c30777e6412f58a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ddf5bd802ac0f834856c64781b201d063d924664d116c2cda56be81e74daec3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lost-dulyakabu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c95c147df378d0a5f5387f6503944529c60f3433d81df825d77edf38b6457fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-toaviabpla-madoliso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1097bfa935364e00f06d2bffe1fa3a3ccd906656996048d67c4d037f09a20dd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nitaaus-1sfse2-reff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c9c18750b35f26abb489e636174bbabf228bfe96d058eabae63297d59fd6fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-aa-sffs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea49bb468710a43ee3c59ac041576feca7a9bd7b5c6029a0dfb33be1138d6b87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ucok-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f0f9c62ca015d8bc6075952cb5b2372299ca1a1a69659bb5db2f11140dab08a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lukoiki-nisnmabutabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44005d13db798b551ec53dc61daf243690896635ae58a79e18eb85d9a8bcf66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-frasu-ofu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 771bdc11e20aa5d5f9dd5c16a16962cf834abb3323a41bb2042f521e3c7460b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arhani52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13956a4e6e8a7951a49b260067054ae5ddf49f93d5468ae1802ef27a45dedec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namasae-naiuaa-sosmaiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b707fc8e437ffb18a322ccbcfeb1cb5dcfabd9a6c26396f31788d61b8cdff4bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jelek-ras-batubat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96eb5d135a9943d638826a54d8e1a8593e0e09f26c78ad23b40b21363b8d53c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uafagarug-mfie-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13c454b75b66fd77123e67afb844b9ddfb203193877b028d175c0831a351876c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomin-nosfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17538c4a0f06e7ab422b2a96bd4e7fec12f04b3113b8ae6a08830a03a169d70b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d336ced5eb2d0f4c13f812e0b251ea876701897a779417eac6fe7425c0174ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...