MAL-2025-171439 Malicious code in kamilcroissant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b7b10b428b356409e8c41b19ce4767e32a42d927f0ce42cd54042fae449df6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stellarhunter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efde1a229d98659ff10d9a0ae02fb6d05b769d1679df279190c1e2b23ebb9805 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kevinrodriguez (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23651280af458aa5a1aa10b356017e8bd2961d8d02d420474b07f2bcbdf59b96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ahmarjamal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e64dc3fabc74efadd5cb14800dea68f121fe3ee178463d8c41218222e77a6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nidhipandey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdfaaa65b713c065221e393ef4fe47b8fef50d066b8d6fc302bcf221a9f4029a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clodaghkelly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8e9bf3bc5f31ee9ab2ade6aa147bd4d6c86a67cbd855964ca6933283b51646 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ajmalzaid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2f6afdf8e99605ff9be001e7dcda9e47fc6871edc8bac1be868a37c335d5640 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171397 Malicious code in jalilfromage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c1d27eb67ab03c0bb5ed5bc9fe4309f4b65504cd2f175c389981fdca92558e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-ogof-dasgsgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9d45334908961111154ef1e7f70f82a64c5ed2e60a8f492d44330ede64a0a8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagnias-ifiafgag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caed87dc4282d3c3ac978ef0afcd4fb75d263a2364da2eb7c1b0573ac4c8bd3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nameka31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a16451c78cdba92ea606025340e8ffd1feeb0a14cb8c8e2d9c57b0be2c1c2321 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f20eca48cb9196eb52a80099e89b65173e1a3e584643af7fb9c332d785a725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aysali-aisi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6459c52d691ee22a51528138f617ac9aa3c4ab69eb176e1d1d6e2cae314f0e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in analusia-akiai-auniniu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6f366717076b4073622a084c056c3fc3a45ee6d0e2aae8b23cbaf51239c35dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24860de24d55109468d34c45b703f2b68752934caacb902a64fd95d284e5d460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d336ced5eb2d0f4c13f812e0b251ea876701897a779417eac6fe7425c0174ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bintang-tea38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f72a3d16312f1baba98602441e2c08359ffb1393cd6485540450da639b70a6ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e262086b55578ac298b18c1228aa197dc51a3760eeb72020a4dc5615bfe140d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84d9046ce749c9ec2d96d07254b53464377aff564fffd6d90f13724e79615b9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68f36ec37c769a4920cae5fe22932b4ed1c47499eecef97eda400967cc0df043 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...