MAL-2025-175954 Malicious code in mahniya-suayu-ganoao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dda76c79684de1de9f66961deaa28fccd1b1df3e15624fc50017c768ac64490b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177558 Malicious code in polymer-aavof-aafdao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 493995f58ac19cd2ef433204ed6156db33583b3cd9d345edf1e33c51f924d45f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173094 Malicious code in bafai-sunai-caiau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b8363689fe3fe66de6c957ec225d86f8dc3f8720b93037d9d78d4fb879d5f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175059 Malicious code in kaka-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a4988c653862590092f1a4c7fdfa5c077808cb031633870148d0fc0116b789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172629 Malicious code in verts-otodofioo-namoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07e9edfffa4071434659e3172ba797055063fc44bf224f5099db064d79e5836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in skyvoyager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e3bf5ae23656d8c57eace5425b01322df2eceac155afeb581e285ae14d7613c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ahsanakram (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e40b32fcf83146ec4c21658d19290b2970f847c17542eee9833345ed2cd097f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171266 Malicious code in ghulamabdul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b8413768e7130540a95efb1c49a78e38d2b35717c58f9ac83a477388eedd1fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amjadtaheem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93f6d0df3d2ecd57f86eac2735c2e1e526901ce4814cc1f3c1cb85bceef3e4d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in habibbrie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 430a67a7fc859738a61839b88d6f7fc9ad71789a7b9b08d420f4c17afdc74a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jessicaanderson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dcaa4c29aa28b79b4cb744570e8508efbabc0a0ebbc1d025d86c7910146ebf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alexandercollins (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae4ae9ea7258e6bc79bef326ab6d3db2995a477b89825267c3eeef34f01b38e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171142 Malicious code in elizabeththomas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532c7de742f7b5410a71eb085c34ba63072672b0e931cb6b2a6b1b17fd32646d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171660 Malicious code in nishasen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc8d508ebc05fbdf25f7d23029b384e933626ddf3900821d127f454769b7a185 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171940 Malicious code in tanzeemashraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d06d9237812aa039f7aa732f8393583079484a0b520f0077c41a60d160a5282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171017 Malicious code in chafikcrchafikcroissantchafikcroissantoissant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8488fe9f362fd0a60e0724284306ff37343c3b07127b649539a91610d48d7d20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b0d7bb81264e04ef60db836f214e6715344f5913389e527455435b5c87b853c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76cc552c84b3dc65faa96e2e50f0310fe961a5308224809890c3c0b43c2df6ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c33cbf0db6823dde3cf150a556029aaca54cb6274b3e829168ccd87764a762 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poli-akilu-lunakina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f686adf947657a9de75475336ab907d273fd6f624712ddddd3c049a3affaf0c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...