MAL-2025-171379 Malicious code in jacksonking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b53e6dac25d26d8facb854633cfe3605661de49be27d3c729aa5a8d94c45514 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170606 Malicious code in @fahmisugeng13/tea_fahmisugeng13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5a83359a76b91ee8b6d54c2934b627a79fd9176472dc253d43064e8e43d23cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171176 Malicious code in ethanjackson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73469aaa2fc519bc08b98b7d724fd8ec7ff81b0c8f4654cf1acfe90353ce7aeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171465 Malicious code in kopling-sentrifugal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4a3981a73c0bb93608584a940ed860afd00f3f6a981aedea3bc03deeefa8cae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170794 Malicious code in alqamiyaseen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c23e22752f1ba103d474572df6315cb5b73d699442d135ebd99bcb754eb61d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171649 Malicious code in nevestx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c072f68d168926394e98250ac9283316307a4e22f3deab024ee6494783529cef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171989 Malicious code in waelcroissant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02938ebef349e4b02b79848d698cbe1ba7a220e05e3d7e72bf295a0f1589a8fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171172 Malicious code in ethanboliviaandersonrown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a09de09f63765cb0d359534c58d14967b0bed10d911394957df76d6407a2013c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eeb7e43408e1f666221f63f5af177954141160c2ec46477de169e7ed92b8e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iqbal-poke56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 231fbd094709189f3e10d357d1402a2a15cf99f45bb31204365a05ce7ec25e72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b856c3bfa71c55d1bfec25ea65eb03b786082a1ce05de382e9104dd15cf4741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aviah-afi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfd9f74682fb94523c4633a378fbf2f4111244ce8de0906bca44ba776325dff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bufpani-muisyau-ffafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66263dc5188d6bc62961c505c5f9597c6608b7f011d31cdbd228a8b1f9c44c81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cac4b0aec7153ef77e0a9fcaf36c3f18735f026e35ee97275743412b1548aa40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20d961848fafff895d156e419bd788c6db82b9a575536a77b5156d9405785f14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-uiu-vilkukbimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c6e6db83abb05a27288a1a81d33b60d15125fa502fb6bd127c40f099ae1de96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufi-gobali-jaan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b487b7f5e34da540c2eb5653b0a92df2ef7467b9ddf78b2cbedf7c4ccdd65d29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otoin-agodofgagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d20fe8b67cec09f2d646074d11a15e3c1ed6ca75582b8ebe1969d3e1cfe751c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-unagogi-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e1a7e014462cec24998d17f25c63b09d4bf682437f36c64f9d5e3d72c076a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-uiu-vilumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12594e312ecb411be66ee0c5bb38c15f9d9a3a88260b8c24d9edd5cc47219a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...