MAL-2025-171211 Malicious code in fayazameer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3fe44e1c840d637954e886c8b06a5262531347d7238bcbf374d61787104bec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170693 Malicious code in ahmadfaiz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dba1c41a4bec6721309be147910ea5a77c2925311c5b31b36041129679e0603 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170810 Malicious code in ameerbashir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a360f8620909b9fef7e27e8633dcbc2e4991b64b9e2b39a159a50cc7a5d0a23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171240 Malicious code in galacticcrafter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4f068ee3aaa6f3a88c8103349c129fa79c29d690095739bba21d9f8fd0f821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170935 Malicious code in averyjohnson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d5e212a936048ef7904bbb0cf9b41441574978fc3aebddedd70757c9fb7e1dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171380 Malicious code in jacksonmason (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a26ec54d4324d2cf6bb67baa2a15b7667b289c8fea3cb52530a4ac10c18f009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losit-bisauka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84fcf01133dc39ecd0a488530b79f95e39e987205f38895615c33d36372bfb6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/idd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2df6d8c2013e24e3a393c6442f566c084224643cc946955cb52be95058f0da9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-tfla-magaoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa1774ea4a84533266f3c902db63d68dc936b9e3c3ae653e63761f1a915d38b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ayca-amila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccae6f0fc802729631ea4898e3ba713ed79350e4e0b812cab677d463f68a8452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a92e0563fc20ee92482f3e8f6b29d4b9afd87cf0774f6357ce217d759addac7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir113 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f09b603736e78862b82ab1abfea945831cef3d5b1ca053806cd8f52b70cd0ecf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irassdhi-1-rwew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a48649ad017a8634b9af7354c56cd985a5aa658cf197e4f4f38a6a6f4652a42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36dec8434834066e4cbdf96caf87694e1157abbd933d0cf8e5743cb1e4afc722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1178e3c0f3bd7ce4923406927a1543ce4a692fcdf9534db2891f8fc4a5c5709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilava-dakaogfrae-nhaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef5d09cae897846fc761a335c01f99954281777f918b868155520a677632fda7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25addd62faa859d289842a62b456cd13cca198fd3a481e101cf948d23aa9332f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-luki-kntuomolagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad3c720468613d93ef77ea3ef71c82f7e824d9678f0efe9dafebdb4e21335480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fini-savion-trans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c522b75886a74d5060eb03a1e5fb01f1762eae2bf0ae905bca07adf2ccec8ee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ce0b39bc0a1b9e3492a0cc5def15032c2903bc46736cce238b9655c8991471e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...