MAL-2025-175321 Malicious code in kapvino-sofgdi-gagofgfua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f44bdaf19310877a3eb01f1038e0729f2ed25cd4cb1617b9da2679c3f5a1ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173522 Malicious code in butahu-asfauui-dufusu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d994556611f935f57372d1211079d07b14ab712c052f9a069e70cb0cd1267f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172501 Malicious code in namesi-maivla-aiubu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4df234415c7da88fff136fda482639311563406d5645c2d0edc39edfd3571f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172354 Malicious code in guide-matila-unpaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f5fa7b087e8c499726b252f80efaa9bcd3bfda5cf47923c63d901beb4f4479c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170894 Malicious code in anouarbaguetti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d530e7956c8d3940d2bcc2d3883c6058cf7d6eb786c4191edfe6f566650890ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171292 Malicious code in haniibahaniibaguettehaniibaguetteguette (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25d965ae5db5547c12c84bacfdd8cdb7ae1f6d8989c1653b5cc3d6deecfa0a38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/tdasd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b408404cf07398d91f0b59377a2333f95a275b210ba2b860f2ffbab2a8944ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61c5db969213a8c84c67e3baa0096f578d79c1518fbaef0bc8a0b87d45d9ae56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a96999eb79abb43c51922173f055cac4626b2741eb720bf0202c427ea6fb2a4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a52a4b8a288cf1ef75c4eb56a9722011bbaff13a72aee463a16682a6e650882f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-alao-mafadiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 053a313b5a3ba92638049004049563cb2852b499fff8efd3e2653055badca1ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke150 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4edb937185180533fb2b58d26d2f0ac929a350752a50e599841578c6aedcb9af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muda-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86c1dfe60d484993e580cc5f364dfaa6b915858ad6676429ca76e98dbe39af46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89d517ef6b3089326b5efd89621e38f69ea646fa120540bfe490d2678ba056e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dea523c7a8c2b51591dc8c2787d10ea30ce0d89641014ab3f2979e246625c7bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169371 Malicious code in tusaaya-0a1-wesaq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb8cd464a10b14e5b666145eda826e66729f975f3c495001f6ea2a8587654bdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165325 Malicious code in sabua-muhasi-nafaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85245fffe58a8419e7d1c42902b316b129ea2901a3e0c15c7e0ce9de1221f15d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a690a6301b012302ee236db43f628f3568d5be736dfb1e04581e86a8d93f2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 418de2eb08df9082a545c86e971de73182aeea6128b60d0bcc51bbeaffa7eb94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutr-sds-mutrio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77ad7daa8be4eb33bdacc2174a5fba24159ca4ca248163f7e50929522f66ffa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...