MAL-2025-171439 Malicious code in kamilcroissant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b7b10b428b356409e8c41b19ce4767e32a42d927f0ce42cd54042fae449df6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yasirazeem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0ac96b4ae167bd934f52944cc5560df29b6a49341e9b9d5c200021d0c24b185 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171336 Malicious code in intankusuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b7d5dfc3ad4e2a9efe6cfb5c645dc001491fcbb1f0a0d4cfca20a5d5f0c4ed0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kevinrodriguez (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23651280af458aa5a1aa10b356017e8bd2961d8d02d420474b07f2bcbdf59b96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ahmarjamal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e64dc3fabc74efadd5cb14800dea68f121fe3ee178463d8c41218222e77a6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nidhipandey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdfaaa65b713c065221e393ef4fe47b8fef50d066b8d6fc302bcf221a9f4029a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stellarhunter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efde1a229d98659ff10d9a0ae02fb6d05b769d1679df279190c1e2b23ebb9805 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clodaghkelly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8e9bf3bc5f31ee9ab2ade6aa147bd4d6c86a67cbd855964ca6933283b51646 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ajmalzaid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2f6afdf8e99605ff9be001e7dcda9e47fc6871edc8bac1be868a37c335d5640 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171397 Malicious code in jalilfromage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c1d27eb67ab03c0bb5ed5bc9fe4309f4b65504cd2f175c389981fdca92558e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e262086b55578ac298b18c1228aa197dc51a3760eeb72020a4dc5615bfe140d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ydsffr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 746cf545325e5ba1d3f2f2493c756bfd61dee40d5d0e02cd9aa4c97c7a1bec86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f20eca48cb9196eb52a80099e89b65173e1a3e584643af7fb9c332d785a725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nameka31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a16451c78cdba92ea606025340e8ffd1feeb0a14cb8c8e2d9c57b0be2c1c2321 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9fda112b8dcc551a10c9182ec54e290d988b4cd6f34c3cb5385e47bc7041ab3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84d9046ce749c9ec2d96d07254b53464377aff564fffd6d90f13724e79615b9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 700361fb99504f4d84b8ce593abaeee7c34ba707cdc0afe9288ad86272edb095 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68f36ec37c769a4920cae5fe22932b4ed1c47499eecef97eda400967cc0df043 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/yisadas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9763636cd5a0f6eab7885ffa612f1dc4816d320f32436ea39d37a714794fb11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d336ced5eb2d0f4c13f812e0b251ea876701897a779417eac6fe7425c0174ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...