MAL-2025-172304 Malicious code in augis-pomo9r-nusfida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 659fb4f05d913944089ef14d809130fc21f646fb3da9358d9f5420d8a50a6b3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172494 Malicious code in namei-mla-anu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e5d08200ff8924a5da1b46728de88ef772a9bdf1b45c8d2f89d7991987cc8bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171069 Malicious code in cosmicadventurer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaff58858b857cba19fa1b41fccc74526cee54ee83f46c2f6fabdac2b5653873 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antoniosouza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee6c064d97d54334fb02e388f655d53fb4263de3172b8138ae59612b239dd8b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orlabyrne (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e38373b2545c631b5d979b044762b060e20b5351bc1ad9c0d91d6844c188420b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aasimaltaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2165054bd18226040e6a8b2c0589cfe407775eefeb4da20695d3275b033a0d60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170910 Malicious code in arifsaeed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47a8b2f90a81153ece81dc306f462472d21c3a21bfd16831b252085d989f91e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171121 Malicious code in eamonflynn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f735961d4bc8775868f7675d9366b115c11393121564cb1bc2558debb0976d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171941 Malicious code in tarekbaguette (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a52c0d6ec259849ac6c15e5cfc6422bdab0cef67ac7f802266970aeb0e334b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171092 Malicious code in davidasik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d7bfe49094f08122033b721f5d96f95ccd2bdc71de91a957038bed3dfde3c9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162908 Malicious code in nokire-loklok53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 424f6f3213b272d9375d86f13347bcd2c9394c7bd6425058c513e284bcd54826 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-fianha-jinu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbf9286f323b70b65e35f6cb259c9c8b533f0a52dc25ce4253fbe5edb2552578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52061643fc724aaa60a852b76dfcd4d3c1b9f596a52f7f3458286e8faac1e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-oguuof-dauuhafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e7a4a4154d44f5af7a422b1d3d03df8795bd0e1ff502aa5477bc5d31bf17e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158877 Malicious code in lookingan-namalaka63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 837105951360e5130bdb46874771961da155aee52f9fa27737c0584095fbe7a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andriani-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b40f6806402f64d2000ca5201cfff139e49bef77e5ec8ccfd3a66f77a41af5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-al1f-daronoaka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09ba89676f05311eb605b8e0c0af040ce4d01b1d4ebc098d124a307524d1be62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32b20be01076828ebff2cc9fa513b6b1927d9430ebe0663592ef0f07d0607f9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54b2dd498aa7bca93f2f91a076610c8f88325a25d971548d8917c0292faa5ece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-ai-ups02iek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa26902cbb658a903517e988b1df8d22f33e16533c9c98d4b6570808484f9b73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...