MAL-2025-174181 Malicious code in godi-tufufaa-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 852f7b2400f6184db31577bd9270b20a809fb190213ddb237e5ad11b6c0825fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sifagima-fagada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c86d6aba6b37871f993a75a2f7b3401c5f99b03df88c55e195229e3a61a3943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149417 Malicious code in websockets-carina-test-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44fe6022b47e0d85124b6c567d0f3be7173b101b3462c07fdd908843e2284a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-mangut80-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e8a34e4cc7705bc09469a75032113374a04294263769ec9c7ba02ef9ed6b578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-tahutek19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b52a3447049c13eb9f45255448e4ada331c43cf4540566717e64c816c0d5ed7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-dodol8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699a9d4765a0ce2cdc796148393970c278687568d78cf7cff24f740479f356d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-lumpur63-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63ba06b99bbfda6af88b848c23608384b2b64adcf243422d45042fa792ed90b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-gepuk22-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 730ef3284fd2d771d51169c5c20b4c8b874eb0a35dd56066a7efceca24cbf198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-tiwul72-rudi0x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a4430e5a1b9242b0ddb3888d0cf762e5ff7b27c62930372d18f5621717eba92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-jamblang23-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f35e532e23135c839f10cd6d316c11971c168300747aa641302a94d615392f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88001 Malicious code in lovely_tortoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f967d31d81baba197a881e1b2927162031c25aaf98fae05d9ffbd10a8f170236 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-soto45-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3e9b44328543d76ff153be437b622f26ece452c81fe1edc86ec7d4263d9727d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...