MAL-2025-175036 Malicious code in kaka-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3701e5021809c7d06de3073c77a81b5dfa51b1b6d8b17814c69a0de1fbd527f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178525 Malicious code in sahufar-satiaf-favurafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcb8cdfdac7c65abeb056d6464add9c416d59175b2ce5143d79318682ae544bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177203 Malicious code in poglymer-ogaguh-hiagagn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a922a5ef7f6434f1be39aed43daa66cc9d0a7b32c1a49dd557de2006a9b16b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175015 Malicious code in irfan-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96223725b029e497496127cece7eda48e22d176511168e0cbc294b69e3ba55d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aps-leod-manusia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a3bec4823078fcebd1b30cf961e6d04530074879d4df970a1a2cc8b184c9037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172333 Malicious code in guide-maia-uanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf1ff80c2d1d26283dc4b03e167daa7a862c851ca7bacf716916fff7285a9b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miftaikyy/tehkontol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fbd43b528ca856c0e1dadba4fe549b0975815b0f06e089aa94a39fed120fd7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172436 Malicious code in heres-matnla-unta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40048082b504175abc3edd9ca9fce0452cab076256801de1409057844d048cf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172584 Malicious code in verts-otimo-nagfigaokfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e706f0c4dee8391702b9e862ffae3009f2be52a1aaa07e69dc704f151c7abaae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172255 Malicious code in augis-pomdoi9r-manaos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c70b348bf19b94fd820163ca539db5dd650743d58c2a411facb061c9edd98b06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172414 Malicious code in heres-matinla-uinni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06fc8ff7bb0b3ce717e653f1f41cfe823117417bed563f975340cbba318ff355 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marouanefrancois (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1884c2bf4143dc79926414c5c40a7293e82e6fc6ea523835d8f445e5135780de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bashirameen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a31cf49bc911b6bb76178300e3da276aa2dda72e41399884155fc884acf5aa6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in djameldessert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35e6d9532ab520e157835742bb3e37010d8fb66891dcb09e078cc85f2e559ee9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abukhalid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e513721be6c36fda58901da21dcb861b85f9da5a375f93a42464d3e85d29896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ferawijaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be1d4563bd55be9abc56daa3921dbd9f826a312eb8a793652f6562212df3e493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rikamaharani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a1edf6b0f974ebf6d2c0eeabbfe162c2c1700e0730d52b20b2346f3a1f0cb91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in samuelthomas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6e068124bfaf3bf08ae2403435c113c04ec83734823abd5ec21f4822c9a3056 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aislingflynn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4deb6903e9f00f8fade1becd47c1c70e0eccc3c36e6c050118a9df8d0ef5dbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in universeuser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5617ce471e45b00d2c95a229d9995de9322d4a5e71eafb2cac3f6731380e88c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...