MAL-2025-171231 Malicious code in franciscojunior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7358eafa81cd2fa457dfbb919e1eac4f2f49e29d444c9f9557b3f51f0e4408b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171969 Malicious code in universecrafter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64df46bfe035e7f04c129b14429094275a3df8d091fb81dd1549caae8b410fbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sfaddia-maraida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1919f73624e6c385975356c53b20b1fe426a44239491ae82c5b2b95a22fc4f64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagmas-diewoggg1aa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c947dcc5507ffd3e1e0d3a64b12101fbe1286a435a38751844b42829059c9865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makanabi-aibiuba-uffai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ff0eccc6a5a5393325a123bddf1dc209a86bbd54b6ac81a5fd6a4824e11b17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/jzdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74751c07619ab82b88e50f90eb7a863f0a46b54d44127a3eb9f04acc197229e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-visa-teajawan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83eb0d21d1cc60142d96268aea7128343473266c1c0759e0883f2e6099383200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiba-avi-aumaunnaaata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9625cabb4d4eecbaa618205a984ac0a1c050a287f4d366a71bb2a90017dc7480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3fb9b958f356b28bb57ecf6cd03b8b55f3936343b1ef3c06a7b67e9dfb8c0de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45692f3e9d122a39931b4cc1df6713d57445dbd7c87c9df7789c3ff9ed648c5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0df6b1f4e075542d19b35e1c57292ebc4de9d6cbb398bd0c7603893a5305e2f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uarg-mthai-suff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd20dd56afc905b6106c51c318e191c8bfb4c7a9369a55bd360fb25481dea951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bufpani-muisyau-fafiafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f190ae7d0402286bdddf62c7881e97e43b8bd47f40303c8a8a1123b1dc7badf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-tiaala-magolani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9b66018bbe037de700dc19ad4ef441c2247e185aafac247c50a62a0142bd99e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/lzgh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f59f8008f90660c0c70094341ff1710dc7f999eb0d90c2cd95e41cc159baf1ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee088ecc851159a2e4c482fb4ad70384cbba1597db93f39882efd164197bac86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manusia-tavil-maasdudfdfoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7bc30bd25673af07313989ab47b6f2828f05e7ddedb978b1b1d3f4547df4049 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manaf-asdsssin-muaanst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75b787f07fa0c4614e91d9cfcd40d5f18da6b99ef187acad9840a1d1b3c3fe21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5983d2bd23b933b52fb560df8c92a0014d3d1a301e58a14dec3571dd49117057 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-aruma45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ae41f1e434ce597b2a08379d3736b24b8d412ece621f27dbf4fe0cfca6b5887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...