MAL-2025-170620 Malicious code in abdalmalik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4fe2a7159606092c94cea302da8b23debc71655bdcf917a5fe57821118ab722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170851 Malicious code in amjadkhaleel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5673e01eff8973781f27e02fb8e04b0bf6e77ea487b2b1fde5b1233da8d6fbc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171599 Malicious code in muriloribeiro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c19c8a85f860c3cbb6852db5427a5797c5e564ae20c8bb91e50fd44a104b93ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firdouskhan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c60d0cbaf674f25e33e87ea4a8111b3b92c63af08e3670f60e5d2b710571df6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170859 Malicious code in amjadnashat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cf6e107800414686e56f18c14e3906ba405e2fa0429f94214830915af4322ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170923 Malicious code in ashrafnadir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ba3db0808e137edfad7520651f4e3671f354258ce1be92f015e807b4172e005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172033 Malicious code in yusufputra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdac70bcd90ae98e8f37ea724bd7e54d98be02edd5a9cbd0a9a28d2e2519d04f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f987e8765c3bc87daac3015925a38ab05628e79b64a5b96b51bc1ca6e0f9dc78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d686e6d79156cec4cd7e604991df796c3bdba9aa1658fafe15b8e595568ff4e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ea2071fa22e84d0faba7da89b1ea318a65f9da9e50bd716ba22e0951648f73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sfda-muraaiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b346b93a271b200dde13c44b33dc60ffa689fce5b366b5f84aefe54609110157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c0c61f79cfe70d0b4db68ea8544c06d4277ec10fa7be70a4e64234cab2b964b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8b19e420063e5c5975cc927dfea4a744260f8ecab490c883e6d232db09c69c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afaifasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c262fb1ff3d480d56c1144f6b0abeafc947be3225a5287194b32ebdc6a7afd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-dok-uikayananumabaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e360f7c04aea38b07b96b7ba6dbbc4195fcb884c70ad74059be2b058ef4f6f37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6a3421d4bd6082fce6102f5a7392a7b576261d17d979205f5f90cb8316f24d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in azhar-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab2f1d6c8a46fd8254cccc844719ce6d91c511caf1310fa4643e06b3f4c1fb8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-namiresan49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ecd7d8d67fa23b40e6b99cb2aad7cc26db6abaa73be0924c82324c2a074bae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8807d80108b36413eed18c0533aefbe03a4aa4d092fb6d27fd1121573fa9b370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/iris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa9c22ff81e77e698805918dd5f2721f4e72b1161a228174829625792c581eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...