MAL-2025-172006 Malicious code in winaamanda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8318f1cb13edcdf2c0beed30325039c685e43114ef6721b4d198a98f106996f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anisyafira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e2a8c122024bf1fd5cecc50136737d1ad09223f776b0ef5e72e1e5774a0a4ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in starrysculptor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b23f41ddb147bd2a533f4b519abdfc0f0550c5259601e74fa2dd1cb8323e435d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carolinaribeiro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf3c7842eed631de904a86c6fdbcd41b73a6b524ff07c99a2022854bcfcc6d37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orbitdreamer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d78e0a092777c0f0f306620ddd6b810026cd8403b4c8096279d67136277d850 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sophiaclark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d4194fd5a7d66e4b3d9a4f1a8f945a0598a9955caf38aa0ef89ce28a43b913d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astrodreamer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c6d0465eaee0488ba3db21e4f5356a241e030203c42984de6bdd207f98b9ab4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmicdreamer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9277a20d7cb8683169f7ae8abc016ccf79115bbf56be7910841e70e778f31c07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aimanrashid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12ab1000726e4a58d45c33164495ad017c6d9d7952b32ccc78da4eb0f8297515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamalkumar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ded55127e604aa362e3e0edf86f1f19059d4b12112634b7640b27c44dabfdb80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ryanchavez (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30efdce199e1e99795cf45ddd4bb1b589bb46415f250e9765f95eeee17213aad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sarahsullivan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35de0e036494e81a6fe9118e737a343caeb260dad3a89861aaaa9c101fa93c05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sameerrao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90eea063c695a0d4fb9562b8ff8cba458c282ca4ace39332effa128f83893bc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cormacryan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3010055787e04383278c2f452571e2f1f5d570935ee2e97ddaeea64f2284d5c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stellarstrategist (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e471c8ea987bcf79d2342407fcb49047ad8f740d4b183a6946e346f4650c894 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lucaslee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 028f92957e6464537cd8aa19144815b3a0a8d2b0bcd6eb7ee9535d28a6aa6be6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in declanmccarthy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c45e98fd36536acae1176a359c442a56babdbcd4afc740b8c59c0bf71853bb00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alexandercollins (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae4ae9ea7258e6bc79bef326ab6d3db2995a477b89825267c3eeef34f01b38e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cathalreilly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c111d3353910e7025988b696aa878bc1d0501f8af18f60d69b857498bc25c35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sego-goreng (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 842ccfc02ce987a883d1c35bb63c9ecfb96d7dd7b350edc5a4fc38d2bcfd016d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...