MAL-2025-171306 Malicious code in helenacarvalho (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48ad09fd38acdd425d2cae8278a8c86aa40560eb562867f378e43e4196b5c2e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171654 Malicious code in niamhreilly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2de94c02e6491905b704e1234d514d756999cc429f155f74ec6e63127bb432d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171955 Malicious code in thiagocosta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b327a4d36467b91c891e3c0473d425419133f9197fdbb8c8bdbdd9ef47a67d12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171683 Malicious code in oliviamorgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe758bc7eb6ed9740f48b60a13903ab6858143d7376d0533aa77c4c4b0efeb53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-agaagff-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a718f0cc9f873bf6489d2ae945c26a6d3a327863fb213a58efdb5e9cc8a98928 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upilkianula-lukuzili-ilakzou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5df40fe4e959e303ba8e0098fd97dd885d99fd686d76e2e11671a498374c3c4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca4b46f591fc2534c7e551805df0bee3e43fd4dd6620ba91504ec6f470700050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-ain-itl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4d34161b39963108472806316d8dfa15a7286a216a432a788c37db4ef41e54f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/irdsis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7998fc2a3b80c790febd333588245044351a06ec14e1742f7761d719381cf78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jimmy-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad1b6a156b7464f54be33ec2c0626b673f2a8d042f9638e46ffbb1380e6aff86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-mdanda-bauta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b122241d6210b8384c63d3880401c7ab0a0227fcd11779292bb0fee6e915ea06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 521bbccda9207173a05551016ea24e45fb11aeaa709f5f218c7fda9e9635967f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 584154de75be04e69a15eddce2771485f4cf5cd296c8b2a4d6dd5af25f7353a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/ssd-s1d (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d9e4d5e8de4eb620ddadd2d10658d943f9d00b335a6ee22e17e92b8cd9179b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akanabi-aliga-aihmava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bbd9a2ac0a084d855f1220bc45425fe46328fb73e30a3e6db1cb6c5dea4bec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimmn-gapig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e444a3cc6d370eb96a77d63b16dea2eb36382c32ea0d6efe7a1df912b99de9d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igno-jimgugu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b760852f3d63d33ffd19d33a406d429cc3d7b516359da3b981a083a411e38f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in san-cookik-raimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0867f20e57e95d18a83d2d7222b4dbbcc3cd3d8fa42ed65455f55f4a2becc37d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iomodra-foruai-agoupai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b23aeede816a1c5b19f02162704ef51f417368fee98805c22b55941880b22d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-loti-bakam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2489a1181c9f37c6250e38b884e12fe14112ef740bed6d62646af1917481762b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...