MAL-2025-178668 Malicious code in sgoodain-sanvgunu-nutiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2a448a8bd51e7f7983436f3e6c9cd2798a231be9a45afc69ddaf30cf4c91a5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178662 Malicious code in sgoodain-sanu-nubaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c8b2ef8ec313eb09733a442623c9202cdce11791258fe2c26e444939c1cfbf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170759 Malicious code in ajmalzaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0debfae03430364faaf120bcb9365edd5da76dca74dc1157df4c01ff82ed9ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ahnafmunir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ed4f0843949b32f28f8d6b7836fe1bdb89b354f62bf5626b331acf32501f83c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f16e035f04a9cdd4a0d5ca934a95813d2274c502867c90bb258bb5086392137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-adst-bruneid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4243bfd356451ca205a5d3c991e159e2f091c58f66e18795b643347275ac927f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juris-qass-urs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c1700f22e38db9826f96a05ea9a60b5172c82584cd9f41107d2951dc1db52d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5875e9417d365118f344e85045969922ad76f8865f24dc28456742fcad79af7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-nautyt-nubl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0249de3f52e800fb17973d080833dae87e155ca15fe87dff672d94d3a840be22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169347 Malicious code in turisna-safsa-reaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d13126d666a33a89d321225d3e2733297f909c7f93ad5ec36b586e1130af5064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165970 Malicious code in siregar-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddce0b72d80459ca9fd7933200cb18a12c35e5dd7bacd9c4940c6d0f627d3a63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153645 Malicious code in azhar-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f625749e8aeafa5c73195d3b8354d8e9ddb6d14e229c506f2b94aedb903356a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151546 Malicious code in abu-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa9ae6cb3e6acd0e47432bdc60b0323ba776d9381122108e3a7153919619010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157088 Malicious code in jimmy-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d30787c3d3baeb67d67a1eef0557b52ede683b96c40be81c05662e284fd4bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155520 Malicious code in gurs-manus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 503d732fe252b9a1b5aec8e5d3f5fb2a21e43d50ed7a4eebf8ce74d9ac13bfda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c60ff0b61f0a7747c1cf9174c07613771a180ef06da8ff7b5c085a23ca98cb8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158776 Malicious code in lookingan-namala62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3731eedd2a408433b3bb566bdd7fd10d837df875cf25636769877aa58b16d564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157493 Malicious code in kentung-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f6f4ef8c421992552716f2293adddc9291bce9998aeadfbb9091a9bee34a949 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163310 Malicious code in nokire-rara23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4667814a77285b29497b15eb08fa181450756a0c8fcc4a8c29f5440549bdcf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166108 Malicious code in slamet-poke86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2d426de1fe800536e86b5b66fef3c6f22c878b0b7be2a3d7be312f022e22cb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...