MAL-2025-172019 Malicious code in yasirfaheem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5ac85622fd6fb51ade6126282368dd60c0b60edf871324c639a0ee02016ccc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171583 Malicious code in milkywayhunter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 721ecc896b4cde8cfb9a28180fcd54dd2f9ea2cb417098bc4e5bfd750c8138ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db8dc155ce0d92e67c8ad00dc7d2d869fe3ae27671973a7abe7ee6651f4a4798 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabia-aliguamafi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9be22d19b71d3644ba5751fb6a8ff63297c81528be4c805c35d59df56087e38e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123806836236a3ebb26cdf96eaaf4861a02eeb340dde0d7b828c26b3331dab6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 074d0952fa925219ce3374fc5a686b3b8f2d8f1077a09158190e7b96f5210c2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lis-amdakinu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7e9eff065e8e15c9072bd0892e6096cc238936014bc739af7eb41244d2f5b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapafovgfiagangagapfao-sagfa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23d4408274cd98e74439cbf946194bc5fca3a817d28a5b7afe1678bf903583ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afais-fogagiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4257fd955757f77c707de00ad4be15713ae674bd41983c7802cdb358ba67e65d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58769c330db00ebace58cfed3d8d4b02088403b9127f4b4368936056698f6c7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-ai-upuasnio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d939d93fdc72d0bb339acd2fa529d3cb2265e403df9ae44e9e1d1c79ef109f1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e8c6ac91e01b5220ea1dfc5e02358321e08bb97abeca7c4ea3585d188b10f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-aloni-tolai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bf226dfcb912fd7a1433d4de0e002f7bac98666517f3fe48c51efe0e63ea7f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nati-ayl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4203873f22f6f88bcffb80b717889f253768f157cba300f936e8a0ed62716aea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sundean-udilasuinasak-vakaali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd9698228ac7218bf323a235156b464695f443f220274b86ff5d8ef82b63f5d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/gzsaody (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea9cfc2d66992fc260b3c5e71ff6f461fa25d2666cd90989cc2f5166b0b864fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gri-nutr-sdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15c6b9d94716c11c77f68d4a3cfbe811dbd0332ba3cd1cbff1a996fe15180e68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manus-tavauil-maoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11444f5497650d9439142b7c51a30bb04104740d6e8bdb8afe7d84aba325f7bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nokire16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cffc262bdd92c895f2d0672eaefa91d3c829447b5f67297f01e8d3b8cbbae252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efcdda1d1d325c9942503b53e1d04e12e0fdbb039cf5e5ff6e665b1579ab2392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...