MAL-2025-171060 Malicious code in constellationcarver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8d7bde36eb802242f434706133623be3fcd84348f3a7fc3fe3a14f38acb9dd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171719 Malicious code in pietrocosta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45d452f23100e7156aab3f80e1898a2c87c00dd7e8b9969f946768e39d4d82f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jelek-rasaaya-nurs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e301d111e5f3df6e8fc1f3c994cbf301b0c13ad59e53ac3356c91f7766c1259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-lady37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8a06bad6aa0c938aea3878e80b1dca7c54f397b9c24aeccae965604e86b5fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b89eecf13ab5d092dbcc745833b75448abedbdbf2f367d37a5716d7b9cd4d13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lki-kopmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bff0abe877acfec585a8bbf0ec7919c6372fec56cbbd5fb667067cd2ddfe262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokirane-asaigfaka5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5766a91127be072a70c57b835c3a29eb97db8bd3ade37af1b6eeef3450780e71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aedc6b1fd1a03abe907b3c61d2c46a3ca5291aa2b25440f3e622a461154a458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scaiasor-didadafra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7da9f258d72d09e01bd50794ae78fb6518d8e2b704cf883c6f9872b48e451af4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6822c0b3130823ddb8a977ccd8d2724fe9206722f2dce6f1a23594b94a83fdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in man-nonatai-tgiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e12b406c5c8b9ff642186c54ea06a52258ce99b00633322ca154aa7ff2990ecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d37f7e808414741f888b12f6d66c93f27a61b29dfa038409cdac64d251a0cb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-lniu-limuikali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 210cbee29feb93660c8cbba9f721f24a5560acc251b98d65442ccc34440aa7ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c226724a4bdf7b337a16a72da87c53f49dbe6ca0a50ec4b9cd74b27a0b44fe2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b67f2330f19c6457e0052816b58eb7c73edfd3668413701ef9deceb32847880c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bd6003bf6495411bfd30f3cd1b8504d514f7033c597ed2d201a7a94280f393c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1003521e016ad84d5306966d038fa56fcef3e074e3a00e46d6383d10ea7f549e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in put-trud-mutiara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b68da4e689ddafa4e83a5507b6fa4e0842c81312b94a9bd5434f8473cf4dd3fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lost-dulu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f937317b49f4eacef10693f7c7a7a87d47cc5c179b112b49f407b525f203c52e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4157ae2c013b8bfef370ab958f92e3905e901ecdbbce875f7596962fa5b3b537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...