MAL-2025-171002 Malicious code in catarinacosta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a891afe350f44bf7984fbddc54ed8a87a3be31143a1f4fcf3036316db6581a9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171025 Malicious code in charliemitchell (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0b588a1dbe87aeeaac7357c789a5359b2a2b0cd5a421ec7a49b982f8ad49d6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke124 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7788e5c796843b69379495ae7cd2d4e0c9594a61434045c326ecda063e11310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/jns-s21r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f74b3dbcbd7142102c31ddbec6ef4472047bb2e736b05a1b959d20c2975e3b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muyaig-dafim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b492e33c2fd334d69eb9a969df10e11ca839a782f6d6f60b35d92b043c3950ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-al12f-dareaghaso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b58482f979a692bd51310ea467248cb3f3bfd5b36e8016290c00ad14eba324e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82e15dbf45832f16765cbaf1ca40262136742208486845d4241f075abdee4bae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehnah-codfd-man (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46bee567aae34a6257752aaf7f37fe1fda36f9395bfc834cd2ba036cb129b52a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nanami34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d952163e3056bdc65a97ad3a660539f42d11a6f94d4206bcc5f9e357e6434a34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsnu-lki-kagbdsdgdgdumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e9f185d77069c386fc9c06959262816d86a602be909b0c931e67bcce35e2d63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagmas-adimas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 144b0195355e0f81b96ceb70c3a5ef69c2b51a99d24cca9f842b36c1e6e9c80a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14fcea0af0c24ea1e12decf47c177d82558a2cb78c1feb025c58a00a07e87e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nusta-buibdan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3c84eaa26b544323642cc4793c435600764c7bc3c6d78f8859eb0c9994b063c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibopuna-mobile-aranbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfced3351112f59f2de65399abc9e6546ae882e6b62536a2d6909aed56a89917 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-toafvila-madazio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018589373a38f8c6f7a50bfc801c976cc448ef46a0631f6eb61f9b8deb37fdef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f7facfac68a48f7c0ef2e55a950e61229cdefede435e79093261de987f8424f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fe6f43684f0d8969f6d2f1092b8e9e2fc3b719f7ca1e9263b1a920cfcc54e9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in azhar-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bedad6e94ac091c96cb7f0daa2138b44031222681f318bdedcefbd861b63e939 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir147 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26cc225376397d38cc42811187cdb5754bfa954fee0ec345b394e70c7d5f2836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-gasasd-9sas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f2afdfa52029f09bb6795bba6fd5051c752d00c518eee787260a86fd11f6a13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...