MAL-2025-172140 Malicious code in aps-leadang-man (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da764cce69b96ff92d871b1762356c4021be947813df35334b2d08cfa55470d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171741 Malicious code in quantumquester (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 943d3652d005ad81cdf83cd5fcdd69a98674e514251b635c32ec7ee998a97a91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cometobserver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 570b79c8e800013aa7b525f860206de1b4134ffbbf91e03ca2f85669f14f9915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/miqwasf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2fbc12d1f0743f273d33d0bd9ee7701e4eea8e0fb1deea5dd7c64e194b98611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufi-gfobai-jagiafugir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c13a977b6c9dfa11c415d8580b4f0a5e292ee170d7571bb8e14711b4364c711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0b17e6bf9d7d799ff307ae3c62411d5ebd09b376c1cd04a7ba61fed72df919c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a6be42f4cf9a8717e338246cd6d01c2d47e041316a1ae7288d798bf8ed1d534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-soradida-naidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dfe7ab197d889f139c2b97f5ae8fb2b5c381e62dab18b961c5dda73045b2d05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muda-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cbcaf4a8dc0128f2b69f9bc14d31d0be12bfeead8216604f431bb77236a0692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusya-fss-ss3da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c06191843da39988e2232a11496507a8faefadb85e6580b85b719fbe0e95773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-mau-namasfai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8d5bb85b206d8789a3fa57822df9f8c7ee211d3b1e1e63690f6d92c51303d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165708 Malicious code in samehada-fhzhs-r7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc4825f4098a35e733f3e3d1ff172e0cded812518249ef2d844a52b61ecc4e0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160445 Malicious code in milraoa-dasfudio-muiop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37b1f0393387d2dc0293d62d99bc2e39ce8063b04f7492ebe40a0a9cbc357b84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166635 Malicious code in syahmuda-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80f4bcf577d20782bad3179efd99d879a7cdd433465ffb6b21b79b89bf2e9d48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153207 Malicious code in avminah-fagmas-diwogg1aa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5df9dde4d69100db29c0ffcb12dcd372c4885e3830d4b0a7f27514b3f96a5b03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155958 Malicious code in ican-poke76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65790450aff2021b7b82c2be1876f469da341612bd65234beb806455acf1a2d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157187 Malicious code in jurss-gsasasd-11as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b58062c05ba83b35c72bbec12ab4eee6a724e2c6c227a0b1518f333794ded4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfd2b8c0f0a049748badb9105f2046be45fef9932c93533b3d1a66e0b880bd95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3436241247c7073b0f2d2948a6f09ae1f7e494856c92bd73d708a564e6fc925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scior-radiant12f43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84bbcb86c592f2461fecdb716e8405cc394710dd5b0d2f5da122e2758f031da9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...