MAL-2025-173599 Malicious code in butanaih-afsa-darfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ea9521305afe053765b4984b94b00087628c10b835df259ca56dc1035dc5181 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174037 Malicious code in divata-tuag-ivga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f027a1ae2df06970ca9d330cc74638b0b2eea150a185547b145995b91c266c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174095 Malicious code in divata-tunabi-ivna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a5a171c0bbbb7c7fee721c44c173269abd8ca467bb55699a28b9a567f63e7a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otioo-namgpogafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e94a70567e4ffae02c87623e819394f32bc1a3f7f96d1c26afc907e3eb0d05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pomo9r-nsf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0b031ce29729e977f1d917ccc00ba82b6008e8dadf09ef891c621e2fa580bb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ihsancroissant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39352bcaf4f39873fcf294026ab547b67fb057b235909b377b7d7d5c85afaadf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in universeutopist (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b0b1e84de57ec00aa32f0a58d4b6026354fd16edf0fc66e06285038e1d16a34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171874 Malicious code in skycrafter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bb968d9b5e7419b3b76af4c4aedcd0f00ef34998a0fb809ec8cde6bd5b66df2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171572 Malicious code in miaflores (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be1265aa441cee4de489e1834d360b6bbe0e646998b4cbe32fd2673e460d9bf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170780 Malicious code in aldipratama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e204bb75db157aab7deb07d3404e26d03799797242744eb1947f6348543ece3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/asx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17306ec72dbb94b40b5da4154850769dbfdc2401e590e1b65ebd4f95c0577a75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in demdadf-sadudar-muaifopaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff6415eae915a8b8acd3cd398f012ec55d27b27c8f9eb4b23571fe98a784b8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nuati-espanyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24b6cab72bd405d652867c5f6c8dca04c1dc41d0b936d7afa854f2c523377eb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91783b711c351183ee41b15feb410c89c96b5cd39c601a826def344a097f6bea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mad-vs-munchen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0934402f5d696e63647def889f526f5bb97b2e7b95ca299100a2007d127cfbe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 746fd1eb90d32ba4b85ebc35161cc721d9828710482a14cb4cfbd7653bc8eead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nojafagaagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32ab883701dcaa6f7b6f471c9c7fa957d0a2b62c68a1cea47609663b07236570 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in piluvaika-kaiuabulibu-nunubai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 800e87cbdb51eae33c12061df8842e37e72f87416ff5a934ab22bf7896ada36f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke121 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 491cff21f8ce0311879a1be5c12447043e7cad8dbdd82b08d85e56e2c94cb98a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhufafyu-tadamai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5eb5b9856a6152b96896581ed7e75b4b8f2b068b5fbd8ed6567b7a4096a32e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...