MAL-2025-170935 Malicious code in averyjohnson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d5e212a936048ef7904bbb0cf9b41441574978fc3aebddedd70757c9fb7e1dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171362 Malicious code in ishwarjain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6fc342faedfc996090c9282cfd3c84aee565a595158ded9095615463bfdea8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171870 Malicious code in siobhanmurphy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b91da23287f0d8e1918ee5e7fcb4ca174d1a92b6f105fa4c3fa87f5c693d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-faa-sa14a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db15f6956aad1e2ed61e293e7e883f72cb200f045286570b94a6d8e01be00646 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05fb43e0b47ccbb0ed21ec502df4cb274bda46d216f41b50d179c119460b33cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed41d2f418ac1c193ef3fc63ef88125b961d55603e8796abc897666b6426e931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losiat-daivu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d01164758f4ba504cfc85b36962c2b76753faf90fc83f53aaa3f7ae15cf4187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abih-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4ab51e75c7d9fa5ce68a20dcdfb72537cf0ef063b9a99227dc3bc5d3a77edba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2bc540ee9153beb7d5a37bf8c9786290d23110bdcbfa87d24cc88c4623f5383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a2a35abf49d5faae1f27d2cd1b3b68acde667c45a62103f68bb5d79af68eb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aikun-misika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a38d01cc0a98403148f2a1bb12d842e52ba441d69c1c35bd0d9beb38258ab22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e77e8703ca0019cf88c28ec730e5936bf4023c807b32849fec56fa8d50a1654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55ad5cc51a3206d5294e20ec6963014635f572a89d3c82712356acf7fa7c3a50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-moloipe-asiaoamianu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c7b109428b3c1f2df0d936fa8fb0142d050c19909a955a8824b415612a84468 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagias-fimaii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce2fae6a67b7f319b7594762eee721980dcd30906928f784102ec2e2cf89cde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a13d55c4c8740d37d2a3e6a453631beab1dfc603e345f64de5e6784a0530c047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-alaki-malosskiafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efe580e776047e96bf7b1bc865741a0c694cd482a8afe41f3f8f858629d6ef14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bddb80018ab2f6422d051af5059ca00df705b174de2912939966c0015739829b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasution-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da104221e36a93f06404c02f324f2f2d0cac8443fe0231d50b2068eb6c51eca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c933c249e35739b9541b31e957b54f2c241e771a40432b946c03ddcf8305b807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...