MAL-2025-174013 Malicious code in diva-tutabi-ivabagau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aecf157c5fbe3411215727f64f2022a8256fca115e02de8dcdbe35bd9368b824 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fadsg-fvunda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e9b9acceb1e86babefd0679b1e5729dff69c7cf595e90b3207de8bee097af2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174331 Malicious code in goodafin-nui-giba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector defa3b4c4192773458ecb145b354aa356dbb5781e5a47f8fa27382a078a8f25a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172159 Malicious code in aps-leod-nufiago (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75dd80175150ac349aa924b5585a8b72a47dae29212f8af554b0df974a051ab2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ahnafshahid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff54af266ef726402d86091bc5416200b1ea561ef5782af83e923484a6aa0571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baqirrehman (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a8630bb892e069ce47e8b56d62745458afb27c35a4cb460f2dfdf7e406d5129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yazidzbzbxbaguette (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6300c50a0acc35f7a2653cad39a5705aa4167e560d61a0b015bf61adc770d052 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171866 Malicious code in shaqulameenshaqulameen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e66c7521b5d03c67ad15f971de53eeae24fd075d665a11a4de50b45cf66648cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171932 Malicious code in susilolestari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 943f79b49cd14fe2b948a2244ed378e8622f0ce67e378025c69a27a0c6302757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171004 Malicious code in cathalreilly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c111d3353910e7025988b696aa878bc1d0501f8af18f60d69b857498bc25c35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/tyuaxddar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c96135d744185e22972363bc5db5ce818863c1631719bf3d176b601706ca7ea7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-molpe-asiussu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e23fb380e7ea1c4753ae35d1e70aa166088ad1dadf96c1286d04fdcd074e5bd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd302e84318f8a43afc8e79faaf8cdb96e1ab0aaaaf40464a0aba33dece8de03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d640f904cfc9de62723c30e31a91a7528d07c1b9c55ff24cebcfc3f7c840954d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butarsui-mutfru-mutyoaoada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4bd7d73f230d7a6b2974a1607b5c13f61d741dfdb6df51936446db0db5efedb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ewa-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 168b744e98b5bc12987f23bf1614a4aae54587c4201f57247df782b8af5036cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatidra-faradda-butfsdya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d97fab9d80fa7e561fb4a7b8acafc583483e92a8f26c98aad5c1f694236c9f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de5dcca1861df3587223f8cf7acb262f7ebeb2b276aef558f633478be8312564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16193c6be247bbe266e67a7d61bc46583f232832802f20ea9bc5b4bae92d2ff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15254705bdfd7aa3a9edf63cd8a51c2b254033e8867a31d418cd87092204a8a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...