MAL-2025-171231 Malicious code in franciscojunior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7358eafa81cd2fa457dfbb919e1eac4f2f49e29d444c9f9557b3f51f0e4408b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171969 Malicious code in universecrafter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64df46bfe035e7f04c129b14429094275a3df8d091fb81dd1549caae8b410fbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sfaddia-maraida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1919f73624e6c385975356c53b20b1fe426a44239491ae82c5b2b95a22fc4f64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5983d2bd23b933b52fb560df8c92a0014d3d1a301e58a14dec3571dd49117057 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3fb9b958f356b28bb57ecf6cd03b8b55f3936343b1ef3c06a7b67e9dfb8c0de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ghds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97f0f85f74c1de5fa742996172e323def05f150e61dfd243a97190c7e5830576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/jzdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74751c07619ab82b88e50f90eb7a863f0a46b54d44127a3eb9f04acc197229e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc6ae9cd7862e47e53f487f0d0998742134ebd361039f7e45599a4b71b5b2fa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otoin-aagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1839a6cf0fafef2284249c012f3cb9b5c2554d2df916fe1a3415ea62fe2718b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-visa-teajawan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83eb0d21d1cc60142d96268aea7128343473266c1c0759e0883f2e6099383200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makanabi-aibiuba-uffai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ff0eccc6a5a5393325a123bddf1dc209a86bbd54b6ac81a5fd6a4824e11b17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166908 Malicious code in teagood-lokika43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede4feaf4eb756c461057c41417000cdd75a06aa5daa789831adf5e755238674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166248 Malicious code in sunden-diak-itarukn1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0f5fda6206013acf2a3cef300e11dfcdf2563de12d50f4284da890523990450 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cf34996fad6689e528ed366289df80066952bc5e0c7be2820443016c2275ff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/lzgh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f59f8008f90660c0c70094341ff1710dc7f999eb0d90c2cd95e41cc159baf1ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0df6b1f4e075542d19b35e1c57292ebc4de9d6cbb398bd0c7603893a5305e2f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manaf-asi-mantdap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91f52aeab32f69c43309e0154741c2995ff79c128c3b4475340265dcb9cba17f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jimmy-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a57405a0ce80bee4600126c8747f052d66882002bb393ae09d2c4a2db94f0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee088ecc851159a2e4c482fb4ad70384cbba1597db93f39882efd164197bac86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50d37e36203071ed73c4741617c5788ad2be55816bd2ae5a718f3304139f439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...