MAL-2025-170663 Malicious code in adilzaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28db19c1065dc0fdca2d5654224f47ba097e954b7b376599528f156e8eb32c7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171282 Malicious code in gustavorocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff5712a3b9860873f69093a5c2de84d45c2dc731ed6663e52890061acfabf8da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171365 Malicious code in ismailbaguette (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87ca0a942596c461cb31eb7fb74fbbd4e49f428cf99772ad328bbd4ca1b8d373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beardoze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d09b8e59d8259392ca51b7775d2001f26f19ba8cb68f1834c059d9e5ff22ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in luizfelipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6481b34c1c9eeef55290d5636b8178b9094ef2639929038321ca3029f04e59e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170990 Malicious code in brooklynrobertson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eafe1ae3d9bfaea89fab2ffbfa36abe3cb5d9244f0ed20d125d6a58d38e9df4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171193 Malicious code in faizazizfaizazizqt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60dfebe950a64df6203806ee615300205cf47399ba605c673cc254b56400a1ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171706 Malicious code in othmanchocolat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb2232f757a42d85d094915a082ad94e3fef4de3497f89641a37acb5124341cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-siafaiama-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 164703495ba8413ef8d3d22dbdfa7b112dd8eb68ed028a666b670e4bb7f904bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/waht (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 017a64e536685a1ee7c63003446abf490ffb4f3ee8b26c226f6a7831d1b86854 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angin-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b5dc2a003dd9755fd085093664d2f076780580e8aee737b3ab0de03213296b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahmuda-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f59312627464dd2aacb5cc55a80b7ebf10ea910b0a946ad759ce0e8ddcdd70c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in analsia-akifai-asulan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52f08b8be5d19b078da5da32abe515b281d5af494b3b8bdac3adb333418cf8b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-sf-ters (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d87098a9fb647d693cd20a48de499be8da8f9f98b7906cdaf6ca59ddc93bd130 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d3f7d5fc8b82ac07a1c56c2df64bf822b4fb86a49c147ed3675b2e9df2fe8bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/gzaeody (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f1402f626c0bcae362dfa0c60892dd227b80d82a4e5920b0edf7d50d7df6afe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa071fd8cc4ef08f1a91c55be82a6a60b14d03de6d7f732de041aa3c2e8327e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in infi-gafob-jagitaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94bde2ebcefd667c7003e85849529250c982758b2a1b93503c906afe23d6b6a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-dibok-i1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db766867f02009704e6be4c6009ad55ffde7b52a9c8a30b21610fcd6b1c644d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir128 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24bdbff656c383b6936a96e398a23f6fbb2e9b956d363932586dfe002f638ec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...