MAL-2025-174288 Malicious code in goodaan-ngafsa-nfagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01133deb3510f85578d253a9059fb764c6873d014d38770f76b6eae23a43f66e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173133 Malicious code in budi-me-lodo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bf99b0a5ec0798c75c092bbc7a09b34448b9f7dd687289f02c651303d8b1a0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagis-figayo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c987adffe1f6a6be2de4346bcf332edce93bb955ec8e08e72a8508f75e4e51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b0660768a7e3679a108a90f68dae07282de4e49f15eab8ef8a467502d4333ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba09ea77b611d5ecfb61d0bd990afe23f5d469045ea31d4a9c0a4c97bb712c70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dea86abc943e37cc7f8b5dcfc064499df553b316548d70669a934b03b3b23ece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169242 Malicious code in trevora-cir47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffe6ff5ad14b593aeb7df2917cabc8e1d47acaf240b3f087a100c739aa77d89c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169179 Malicious code in trevora-cir125 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1631bd1f90a4dcdb35269e3b28aeb97d665ad5ffe76d3c398f91d1abb41d7ad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153334 Malicious code in avminh-afai-fauofaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85d764ed7f10ce569873834ae4e66377a1290ce59c6fde98b262b205ed6a5701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bc21310fa7ac1e2f7e0622e2d2b730497b36ae0585a3bdb92aadd1ec40f5c2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arhani36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1fbd4807c612ee05db7d9f4f125b74392af9570f106a3ba6eb2072619967c7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ewa-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d916e5e606fe163704b45120d764cbdf6a50f0b2e73477f37b414bb2e5441160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-butsya-sdn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7b03276796c61711ead443b46a2e243e0e3a057e1815c2eaccab923331be7d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 616bf88c6531eb9ec013dead1b5dee4cdc50b693bf2082aae3adae57d9d12a90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc35f2383c035c4b940bb9dcde087229331e5668ceafa9b2db2d2387e2b9f1f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-darknest16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cde416349df494721ee22116f80ef148c248620a6c14cec7b111fb2c92458dfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ssafda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 647ce8215c5816ee312e689ca6b2fd8a3491ca17d3f2017485daf11b971153f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c31e581f44251d423b8139663e69b70cc8d5c09fd148194b0c8d2f7eb3983077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac6d372f707c431b63c80e7c1abc5d28efd902fc945b5682b4e338cfc858aee8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f9192ae2662760f2eabbdc122df15f3e5af07f07fef3cde4705b2a91bcdb19f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...