MAL-2025-171266 Malicious code in ghulamabdul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b8413768e7130540a95efb1c49a78e38d2b35717c58f9ac83a477388eedd1fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ethanclark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e933c16cf54b8c909007ef990ca010093aaf71a12c42026ad62f69fbef943ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutdaufs-marimasa-nutat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4232a11ca7828ee10c2025c7dbe334b5a00b27d8c4a95c71fed8ca76981299e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sifafafgiama-fagada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f51c49ba72f1ca46ecee07ab15fd25cf66b3823621f9872721030aa76e8ba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-aruma15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c1e0a02f2dcf311ff592b1bbdde3c2e8769ad944c33a07dc96c3e663f60b7ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d70b7de1b1e6cc814493ca2dda62501d4ca55e08c74e401242e7f21da28e210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arhani12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e545a2d35f69cdc2d04d0a8dae1c2d7eb4096bc0af1e34d022dd48f026ff4ecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masioaluan-ofai-doikubato (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 419ef5432e6c5d27b50c6fbf40d4dda2a6de429455de664453fc07626580c71e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sif-fagada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a09b1a10223f7105bc99eb8d82fca9e28afbc8b193c462f44512899ea457175f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed1afb4e42e47f9a8a61e29e3535e3182be821b384169ec0b474b761b2873f84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-luiu-knni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1945bad686660775c4eb95b5bb5550065f22e1ca071cc23a3a184f477b3e77f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158053 Malicious code in layla-poke66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af1339f08ec0ce58c4023193c1ec1d2a59e02cd5e5af5954b10b37b627d59edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154351 Malicious code in diago-kalop-kalosubsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ef79f3c5f0f6a3fba0b4b5548a8cf14573d7eb2c35a7aacc7b1f1874b6f0649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170084 Malicious code in upa-lubalauli-ilualu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3cfe5a371f416e3a2eda6efdaee7b4df0cf97fe2aca95b4917575bfdec41ba5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160225 Malicious code in matane-r-nurses (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b994492f8518e2a2663fa165fb6e1f34640c086a6dd06bccb7f6237f53ba0b1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169598 Malicious code in uarg-mitauifahai-sufeua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09b5f6036d4ed025d8d79e585a633823cf8e1b89b7d47667bcdef6110538bfef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157049 Malicious code in jelek-rasis-batu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf580b0d87536a4236be19db2b41e3e978c45a912e42be45ec97eb8cee703944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13c4370d6e67d863d5f244f34cadba40b5ebd4186f563e33ffbad73fdf217534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1740adfd682b50ce078e563e0c89f176aac5504ee85a73245751c28bd38b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5dbb846799b5179c558dfbcc9188aefcfc4181fd55d7780caf8903601d53d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...