MAL-2025-171419 Malicious code in jokonugroho (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efc76780878c66c5ba147c950334513b545f5701f9fd3b18bfa7c2de387f9330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171028 Malicious code in charlotteharris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fde3186f4a7631725d8fedb48fe1b644b3a9e02c9adf2116d74b10bfd3e3b45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171789 Malicious code in ronanryan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dcb4908ed216f1bbb6ed1873437f6b7f4d9ac0cbfe433cb07a6369ccc1b7b91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171835 Malicious code in se7enstar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8b30b69df0efea5037b02e213a500e9b2a1e5fd9c89357f986c13ee2c91701d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171368 Malicious code in jacelizabethturnerkmiller (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d88bc7adbbfb62662d62cb9af4e0382160a3da4839b2dcb610c9330444412772 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40e2692f2e297ef4f44d36b9e57e1fbc55b368a83162e0f29033c2ea75166ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupa-lubilio-igugfsdgdfdgsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3d3fc015ec1ae6d757cb3db3500060086646243e637e809207823ac1531c6be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-uki-vilakaubimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4511e64c024d403713277b007c832ae9155c193d49ff0feed177812b5431b7dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibona-moilpe-argo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc010c2bab246ceefc628561e227d21ecf399bfd72788936403af5ce59b63cbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nati-sayl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fc1ab4de257e781e6222e194ab12410352184d783d6cbdcc4f2d299841023e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a73c0ba624378fc5ec641170022203bd26a1d4f0738d9708b4f7452f19eec22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/u-gffs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3594707643940f72fa6edd909c778f0690305c8d1311101eb27a406e1e642a50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-alaki-malfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7b9827d27d58e1011b1d1fa018b35438f5086db6364d20ea583ed5dfd37a65e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af2042eb61ee7aa02bbd3ebe078213ee770defaca5a57f73457be7d7c195bb4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abel-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a7aa43826775b3deb3352bf55a602caa58caff2386ab43e62e44183e4e8d4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-alnbio-tolimasy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f915559dc754180ed3ac605f027ee455e884100c2fcf29f52ca2cf545dad8f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fe6f43684f0d8969f6d2f1092b8e9e2fc3b719f7ca1e9263b1a920cfcc54e9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-boy14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b816ba3d25c498859b8d7d437af9b5eb838af2aaf51099cce78d7c3c800bfc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ingi-gotvama-anbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ab5d9794fcfc4be6d2736b9d051f07471698e108f3fdf871f3650068e82cd82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c91e21cabeb508ef4dfacb2bf4856ee698d6d0f0e8806106a3c5e0dfc3c8c209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...