MAL-2025-170738 Malicious code in aineflynn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9495621246fa8a18623028080b56e314295d7c256d5a4e58a2526befdcfb3176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172023 Malicious code in yassermonsieur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c2a1ca3bef0fa227c26183e5022ddaba52c8312998090b62c49261d7adeded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171935 Malicious code in tahirafzal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f14a143015dc9bd0b544d1ce98f4fab9b6d756c19803c656627fa1d9ee227e1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171223 Malicious code in fionacollins (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8ee37786f94d96c1ada117bcc7ba76e14ce2a80dc6a78f471d94eeedf312f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171725 Malicious code in planetwatcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6eb14d1efb74998460662c6119c4dc4d5efdfe19d18c9c89478c6a4f7c86446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171024 Malicious code in charliemiller (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 311fb328cf83166091b51035ae11489d94ee6570a352e6258dfbbe83a38c51f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171663 Malicious code in noahdavis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d699f76f3ce1d67ed15ab5883f7504c8059988fde80ef7e1e1591e7eb89ad78f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171111 Malicious code in diancandra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cdae1b0934af6d140828e68210654842bd06f72b5f6514145a7b8e5b2be9026 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171829 Malicious code in sarahsullivan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35de0e036494e81a6fe9118e737a343caeb260dad3a89861aaaa9c101fa93c05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in constellationcarver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8d7bde36eb802242f434706133623be3fcd84348f3a7fc3fe3a14f38acb9dd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171878 Malicious code in skyseeker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3886ec9691c4e16584cfdd8c7662c89757a338ee0677f528b3a9d74cf953b7b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/kkfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f9c03646aef4f204df13e28033da7c6ceb36c4a2b74970425bc89b23a3a3a0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/midds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1af3fc84f59ee5e2886b818805fda4392232433a3000e2a59d3d0577e658bbae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butarsui-mutfru-muytio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac0a971927b09df25b3dabca4322da530d6fc6cc72674b0faa0540ebd890b794 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c95037d20547e3f7ebad1edd206d87f4e3b275b9aae2c0883df747ee2783963d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutus-manis-nuatr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b97a5b90d82280fe7691c9274017a57ec87d54d53c707d01c39938fa7790d29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabubai-nalii-iyap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 263f351590a96f53504c7ced9303e6e3d5a920c371bf067905f56b1b60de76e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lisa-atuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb4fa8286024d5a1b1eb919dc7a19985a4793b3da907f858fadaf4233281d30c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c44345f23a01ee44fd69c4c7e147bf6635df1811b3ecfc8666316d37e612584a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-intfsi-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5ddacfa304dbe818fce49e39f43e5c449960ce72d871f585a36b1dfe7ab3796 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...