MAL-2025-171953 Malicious code in teadoelsumbing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 734065ba2455400f98082bb908d0cb0adc8cee4ead6aa0a2b3dd648cd82ec6c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171035 Malicious code in christinamorris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2306f3d67a1bf967226d7efdb1c20dc891c6f15e6024ef31fcb350e445a27117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/kofdads (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aea8377221196971ec5504f744dcfa8b4bcb6dd7b85b9378ba091f6824003723 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/ns-so1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a885bd290db8eda725e6582450776a934cad7adf99bb9ed994bb5e4e3a939208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/p51r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c85876034d6a36860db50a097c9e669e4fca4a75bd2a3983e892c6149a9914a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/ridce (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cc08404422d25feba1e64505e6dc534d24048518240529ec7e8548689c066c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ghxsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44c6e08c6bdf914aac495ece5338e271c04670ae4d7694234dd196813a1694b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e684c3082361f9a7cf3a52c4003d877f281f582469b427ac940d63b497cb41c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiuba-avimun-abatip (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e53a3b2229f7de3c2f104c368e3d49097eb0066cfaf88fe8fc0cbdc571239f89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuh-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be9136809fa12322dc7854ba2f53dcbb85099ea41383a04a6378fef71daeb60c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91c16cd439b4359c36e0a4ad6e526260fa463e518c7d94ab12f165b345aee5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akanabsi-abibla-aimava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ca495cfdb50a0857e3545cccc74d0f628f341adfb4785bac6ffa95b2d0c210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3412c31f38eb3f46261b1165f6c7b01c31fc18e4f743bb689380f483d58bdb64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0b7129b0ddecb749f12c55440b6206d0b8fa7187b3c639b1cb5374ae161e6a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angin-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1f02ab7da63f5889f752cef7b7b74562df3711784538bd99b8b7dc2d9966949 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a50bde25151888c2283d987b6c00a798a5da072e010b2222ddd97c58c84be3d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aviah-afisgagiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eb0bb6e17f7dca1eaa5676137aba2546c63433d63f3fdd262021efd4d2850b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminasah-aifoagiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69a6f2e78413bf0df38d6f1669cc02e662e812706f7117dddd0c0288f5703f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6028631a31c8cd1a77bcda9320c50530b8dc5ad827ac78e84c6a86f30edc0421 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cara-reti-ajsausnsao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c9920cc8b3e14929c9172f29e323fb87100dd4184231e054fcae9281a9cf983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...