MAL-2025-171130 Malicious code in eclipsevoyager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52b4b3d9ec4d7c1c71ad0be245964e791f240e70c5261917c23079404905f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170863 Malicious code in amjadrameez (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1501370bc7c437d1bf12a2077a0971092c7abb292c423ef85d65a29f4a14c342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibopna-mobile-arifaui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc3d94c2d8acda63743beaba1f6a0b441fb146f663a9659d1e5f285866590bec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namasae-naiuaapa-mapotaip (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 503a49360bb16897824c97c3aff47fcc4721086b1d2f178db08267cfd519e610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-dokloi-ika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 734a7e3728c2da93bc0ab8142d07a0f0c68c4ba8a6f3809b2115e3a9c436be86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afgais-fafdosafiog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d96bac10b49d3ee888d6683bf3aa5cbde5c9dd083aa7470562cecbac510aedd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nanami4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ea4d9786efec27cd7e202580477c80cd37034d65eea14e5689a7e8b421d0231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abibuna-mobile-amamiua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f62beea9004a570c88274d7815b898e0066a790b4d4d34f5741094bb70ac1f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-dana50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 612857646f3e55c836dbaf2b30b5141fc3218b360c25d382535b25e12046c902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3d59f782ab14989aaee70585f256d0af25147af6bcf126ffce592179a5eccf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9385cce81cd938ac5ac40dd42a9d1d1224afec900faa6e9dfd11a67ad8d1f77d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tea-osss-tepanid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81b46c738224f56954bc3e46b91b72c93fb31e200df3ad63cff91f942d01e917 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-coki32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 884fedd6eec2ecd489f0a4ac4fdfd1c6ca839dbd15ac6d049aca992c1d0bd9c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-coki37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 531fab839793a0ffc7d901f52d39cbe5f6df802105994150049f55d8a3f95bbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e281bd0478efa9bef9ea8c4a42734aebf5e24e06f2a252a180497bccead64920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-luiu-kanani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9d4866f654cf5bff9bb5656b47d4ccb5a8597736ea5232a27185ed126540fdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 951346460e5d7680a91c182f9b7d3d13c0823c6a244ceb8cb6157fadc23de718 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5afbe85d4cb67484b6c0503929d72d033b73e892d99d8059e2efbdc37a542a25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapafovgfiano-sagfa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82cbff25f3c6b8cf3d57a10cd88e07cb6258d0118160e5c77e1c1f5b1eb62e8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igno-jgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57fca83958b2c69bc34f01575468f3c903deb1ab86aa55ccb7d3a6d4f4876369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...