MAL-2025-171429 Malicious code in juliorocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a72520aaffc22fc0189d0d1454e1840933c88accc3a5e80109cc3668366d68c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171071 Malicious code in cosmiccurator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46808525e1b4f0b2473d0ff1200ea030df1c9c595c835884fe7cb9c8169b5216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in milkywayhunter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 721ecc896b4cde8cfb9a28180fcd54dd2f9ea2cb417098bc4e5bfd750c8138ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orbitobserver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 640108e0b80da39c709089dfb02266706f6031fb936a24a19f3d328fa489ed40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in catarinacosta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a891afe350f44bf7984fbddc54ed8a87a3be31143a1f4fcf3036316db6581a9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172032 Malicious code in yudiputra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 273cf005fd4776f081cc0046ea49c3983c9f386484b30dfc1088eb310e0a3a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ameerrazik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc4d1ff2598b8ff15f1ff87d85284e1a408cfff2db1c28f3404cb7915749ea7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170740 Malicious code in aisamuddin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84996a3081470a4514411a369dd69880901b277e29c364c0a4efc1b1715f2779 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171709 Malicious code in padraigbyrne (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 897d910233a4f660b006db5156aa9feccbee44cd4953780c49b5bd4a71f11169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muya-mutfru-muytio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 132279a1e97a719cc8d8cbf1665b169cd7136b82445c9625cdc56d53b57a8d73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nokire14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba2bff48b3e09846cea2631c096c9c9c6ac188d4f2ca04e838a6a9ee1647f781 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53a5dde755a09a06d2ba9c2d55da2dbe9068e9b6921e96f9708f6e4c93f5f244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-gsasasd-11as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b58062c05ba83b35c72bbec12ab4eee6a724e2c6c227a0b1518f333794ded4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/nyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea117e672816a60b9b45533afeaa676be2ddb60468eab4a954dd85c3c8943ff6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a2215b5f0b5a9c7024428e2ddbdd5e680032c84ee6b1966d1eb16c823f22594 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 023b7c002cee8e0d0c2741822bd9a475aa911cc395c63fee67cfc6cbd332f2af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcfcc0fd4badcfc89c96783c2c0eded5119e50b9747219d973e2446fe0acf513 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150346 Malicious code in @mipta19/asallajaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed4ee23628f8975b32ff8b9ed96b710b7dfe53240a71c58cb87e9b7f9c51446b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154875 Malicious code in fadila-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0561f501d61ce66087d5134af04a2c505a56de2557370d6dc84ef1a35e927dc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169487 Malicious code in uaragia-mudifa-syuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7073fbe2155a6f4b1855dbb5dc6e7a846b2a905af1afd528af3abb6ef48febf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...