MAL-2025-170676 Malicious code in adnanyasser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b97b5259e3248890c80020effc37df1fba385149144e35b2367fb90c755f5a12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 248069a33f2b9a94c36806bb3af9d827a52db1fadbea6fb3153190f27f9fd708 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-intfsi-adutfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aabb04e2c739d7a97cb9a91572859c9d03f46f65d775b090094747ca562cff6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 841b5d8942ac7824b15dfc17819f9aa5b44cf3cf2e2246b2eb920161bffe9b28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152960 Malicious code in astia-alaki-malfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7b9827d27d58e1011b1d1fa018b35438f5086db6364d20ea583ed5dfd37a65e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161594 Malicious code in nabuf-otoiman-igioamaiaao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b51be021a64051ef19db7c5a6a96eae98a64f39db9e323e7db128c9a578ae756 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160936 Malicious code in munir-terd-nuay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd428a10f90237e05f2ef4c33bbb0b0b81f579df2a8eaab87f70572e4bd2e2f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jimmy-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c4904389c1a183c0c6909683c229b0a756c3ff63fc5c1934cf5d41846ba589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4145ed5e69a2f416a92887c17ded78b2dc921fd6f837bc37f3ce068865843cca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-coki6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dee7e3088e603f970bb9352ece2b1c7c25edba6aad3c8f38431670833e5bd2dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ifargafai-igafo-jag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca458cbf014b2d4589f64ccb5b49da88d7c8c9af044e1bfb141ad7544b3933e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 624a3bb1ad494028c57ec3a75c3f6ae510b13f04af44a2e50f0c664f82fb12f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154408 Malicious code in diago-kamuli-lukakima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be23cdb4b3581bdd08f627f5272c28d67636692ffebcbb39190b2c8a45171368 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150395 Malicious code in @mipta19/pgfysa1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 334220c9888e8ad8073a986af69aa3456df93cdf6912300f29144b73fdbc787a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150406 Malicious code in @mipta19/pr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c602df2421072a8170e16cf0394c02bdcccf1ce2c4e89683b24fe28f51aa02fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9047fa3f1f57a757043f255509ec4815e2540690175c3fc7cf3fa627f935154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagnimas-ofisugafag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2387fbb83aeed16a9715d97fad6b66b2cd85547fd4b09157937a9a6612c467fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-namiresan11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a160842026bf01ee11d36662ecce79c2a4972a0a1e6f5bf1e0e3fcf3e4377375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161881 Malicious code in nasrul-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ce7a81eff1f09cb018af6602b90ae97c1754b9746273f682985102575d51e3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158755 Malicious code in lookingan-namala43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ec80fd21d80140f5e95725c524f0ddf39e091d2b392b2373d51af7c2c20005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...