MAL-2025-175238 Malicious code in kapvino-socvni-fafvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 189c57737afe00c6ab925bac31f1dccd80a09c6c9757186491bdaaf9f321b70b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178650 Malicious code in sayyya-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53eda4a1611e4afa5c4eb7b3ca7144067a91f234dae3cfe98deb408cc1355488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175453 Malicious code in kapvino-sovni-gbfafgafaibssi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a4fd51697a326c7158518a55257ad4721c6bcace088cd4cd0f19fbe0a4766ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174290 Malicious code in goodaan-ngafsa-nfuabaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d43a485b2da2542e11c8da2bd046ada6376e47b6f97217a8bf0d463303e6942d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sogdai-dgagagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6983ad5435cc960c674f4c8df3c723fb5e70da75eecbeb8e8805c62f90ebac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guide-maivla-ubntayi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab88b686a9ca956a964593972ab7ffd57b0af077cf9065e75741ead9f031257c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amjadnoor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f88654d4b3ad04e640118d83fd619b9491b80340ee880c68fc3851c6d34cb93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171569 Malicious code in miaclark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 887d2cdccd6d06f33f574965c0cc10a5c4ba7fa77dc62fddc32f586d92d212d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171711 Malicious code in padraigkelly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffda541fb43375b54ad613d2bb62b2eb6de351a84a5b78c007f3de1a29bea8f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/niaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97bae1610b2cb688b3f689a14b05c552bd43412e056a5f43e9595dfb6af021db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f106eba1591289b3e13d226bb88decc061214d569e84abc6fd5a67fc70cb1e51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03e993367dfe530b2874b5df44687afa445850769c4fe6b4f8bd8787ad9258c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 951346460e5d7680a91c182f9b7d3d13c0823c6a244ceb8cb6157fadc23de718 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gobagilai-januqigaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68fe015da928579d9e628c4e58eba56a3a2856b86adbebeb35d2303188bd9ed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cfdf38deae25bfce21b6fd71d26e44b516c3468190c10cb15a824974fc70d4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88464fc7d0eaddf6246e4bac750313f2d68736883e6145a069f3e621a8a1459f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82d4fd24f766db186fd084cfe9dbd180867c7d37086daa61d32290053ab14a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 019ed60f66979b1179cf5d8883ecd629cc2eca700e81b75da3636303aa2a7424 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f894c4184a62b44e74f2695274aaa71dca07dd6f56d0e42592e51b8bfc8b2b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manapf-manta-naya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ac575dcc60463042af0409ca9d51fbcef59dd669aede21414c7db8ca400219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...