MAL-2025-178979 Malicious code in tearich-good8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54cc068d4a0a1b151fab6d3aa9598784abf44e9094b95ac3cdd99824806c28eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satg-fgai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ed9da5d20e8d31085226a8f9bb4b2186311f2931fb3174ec54227f2ee364f84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172076 Malicious code in apasih-ledan-pukak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4df7d47096db9778926ad28f972242c8b255d30969f88ce1d0cbe702bff2dcb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172617 Malicious code in verts-otio-nai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae9db81e67ac96a20c6b26749c782c73680853776ce6175ccce8b05c9e2d66b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimon-gn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 929aeea438fa3f4f23fcc72691a66275dbc606bc40e1dcf74e35de776d734d6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pomdoi9r-nutia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bd384c0e10c403027be1722e46dc6aacf45857cb5d29f208ebbccf0a9953e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172061 Malicious code in apasih-led-poldoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d533c9e8b8a3b8ab48c42856844435ba4e3aa3abb1084aa0f6a9aa0e57485d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ajmalfouad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9163ecc9f07a4ef7b391cee5063602a03f2d54c45d0fca1dd230f2ae854b24d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rehmanakram (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf768dc279c678baec912eb7f045b9927e99d6877515c262fd77e299d69f5d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170782 Malicious code in aldorev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1b095a6457ebbd140133effc5517900be075f2686430a3508f15f3440cb81e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170329 Malicious code in verify-aya-amilsukxai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe414877ccacabb8ea83b7bf098cd7ae8ec8a6fe9f4fbf0fa478df9f217d7ecf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/kalad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 797d9aa4b51b7d2c1be73bcdebec1ed204325c4b76d8cf5cc70448e4dc17c434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/raedcx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99579628eca13962b8cb5e85cb727f0eda3bd5904020ecb0f3e6459116623013 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiuba-avungi-agani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90fad5ea2cf2253f203e0cbb571e61a985e46b008cfe3916ab22cb9fe59bba68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d55e6ecc47c30ab19f59b280c495c0cf459f7fca3fcc3cd7086d4ba7d2cc10a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-frauhfu-faqifda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67192bcb20441bb67e81714886b86ed20cb39034a3ee98b33c8e26fa0c830e83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioalgo-klp-akaugaakuui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 956dd280b85941220b88ca9e29cb510420ce8a45e93bdd37c416452b173624c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea741a20b56ae569b779b2acf0073785ffcb1e9a706ca660edec45b0031bd6fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e1a393b2607475ac011b965174ea49163fdf24fd07e52176128f7f88cd57417 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 695ae76a196241fafaa2d6d240b2ad3c5f07a4341119e1a723642960a06dba9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...