MAL-2025-171403 Malicious code in jamelchocolat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d761d5fdc3babcad7cff75de4f49facd0b72263a36653da11fa65b8cbf059d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171154 Malicious code in emilywilson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c29644265d2ce0d8977f2596020b781b4ca452cb88b44b0d9d98830d91c87c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171010 Malicious code in celestialdreamer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 413ce2c054d425c5fd6c01a1be717f5f6cac9ca01728d6a008c36ed9fa03f24e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172031 Malicious code in yousafnoor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a8031860845a1d7baa38d6b652ff7e809df224366a867390a4fafd5257e3b25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171697 Malicious code in orbitobserver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 640108e0b80da39c709089dfb02266706f6031fb936a24a19f3d328fa489ed40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171763 Malicious code in rashadnaseer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6302c8357682376a595dffb8ee2aadb72a802c8c059a84068a3f69c85bc896f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170859 Malicious code in amjadnashat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cf6e107800414686e56f18c14e3906ba405e2fa0429f94214830915af4322ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupa-lubilio-igugfsdgdfdgsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3d3fc015ec1ae6d757cb3db3500060086646243e637e809207823ac1531c6be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d230badedcc2ace69cfe9af425189d90defd5e73e3686699b6122ec8bd3f144a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b469e308ac958cf876b5bde724a4d670809e50eab3da1ade1ed19fca6c31a3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bintang-tea3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f27d8fc69d6d535500f0ed69235a5f7a6e0db5f2238ca1317abcc3fd479bcfcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/wfaadd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cb3f940ce7d2ed4683a78409a15e38ceaad5f6a6d11cc3d4e330bcbf8a0b6fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kuli-lukakmlaluavuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbe1c3bf2fe3b72e50bec462567f87072bb42c5f54f89532e67f6ed1618db713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/asax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3284130a211c69fe9835caf5e37c567492f6ead40338af0e7287f2707735645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manuk-natai-agamiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c62830490cfbaa74a47f35d3669584268979956f341850133ee064c9be05c2f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 862add8b0b9aafebf28f5fad94d24e6459bfd1c6959a2b1aa67bca38fb741f7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 078cc009b7b81688782c99643c31fe10594e0df12ec722269e208de07f563f3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8807d80108b36413eed18c0533aefbe03a4aa4d092fb6d27fd1121573fa9b370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3121b1030817a9e12920e28a9a40644d0f9174d0e62c5bf58c8dc878240c69d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-nofi-gamoani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74ba52fa47d33a8c63fbddcab4f1fb5072ac8f80040d45d3494f9967172b0c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...