MAL-2025-170872 Malicious code in amjadsamra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a64ee4812e7ca68edbd6f26837edd41f8059597bb634f8be5014be7041fba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171879 Malicious code in skysmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9356fc60b46e663fbf2f9f4278a2d3ccc321c9dca709f11bffb3d8579426cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171119 Malicious code in dwinugroho (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80b933e243c783c010ecb698d669783168673d620707ef6c5bf9dc9d52530b3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5dce92f973e167e33806e6019362f1a8ff4c61bef884ab37826f90b9f6314ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losiat-dulaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f63b52aa9331498ace8186994623eca9e019e49dab1080f7ae0a2460f9ca286 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38f3d52b1be3433610276661c2f975a7a2872427c814c8981d4956949f89edf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arhani88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e954f06e9de4be212a78d7c0a390fa974db0ab7ed3a290f14035a2862b831e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabu-nali-lfbisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5853cb07fe0f049b49170d7874d56a2e2a939baeb8a8ad8e4abec4602bf128e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c237f7cf0c8501dce0746c0c34c0a459ceb7fabe3d3daa638bd6994abb1b33a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tical-bisuya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59a16e7528c3839332dac45e8816a91ae061ed1519be4aafa345b76bd02426e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d027f473c5692317572f6b091b8bdff91b1f5700fe89b0ae3c8003025205aca3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-kkisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe9db59345adb24132d895fabc9db5fe7053f94607df1f652afaea2a9b10259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/wedshj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1485f8b3d28aba9ec74e6c51a7f11a29a7f1434e44ab1e01d8675053b349cfc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69ddfff54a575766e3e2eb0bb3597770c2b779992d15955d80a43894e5446d2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 211ba75a2f1623c497a7b3c606e3864a269f428de7cd2aca507c61a04b2be211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modira-fuhopia-janai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3bb51ec05c64e808ec35a914f9a83ff48f37bae2dc9e01cf31b23cafad00905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lost-dinabuab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc776c6b1c299b380e52c7a2d8df42dc25036108c222bd30b29d25f3bbad7846 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c05c2e3685fefd83c7080e3c59848c308ffd49abe31fdf50f44327aa5e2b5023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55620720d9902586a364ec179c5890b350db7bfa639a4141deaf96f94f31fc0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 013766ca5c7b865b8505d7a60e00c5bc2e412458642c74bf6b0e6c13cfd3a8a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...