MAL-2025-170824 Malicious code in amelialee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f364cf1476e40dbd8253065052e80299729a4b0b49ae10b367356a05f2cf337 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171979 Malicious code in victorbarbosa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d42cf6750c7221ce05f04023ed9619de31eb238b849420b46c3e08a0a6d7104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99fdba4ea815d93ef59ce238102563d0f061f496c706a1691dca59eb206c49c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abu-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecc4f3f8b64f6ce75b8b6a4da1f1d7535da378cf02325868907077daa0f8545e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiba-avbai-abun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbbd4d70525ef9c588d299ec4cbca22b05fcb04543e8c7bfb8adf5efdfcab1bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-dibok-ik1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20f5b22a6ac24cbd12241e5ff64d76142a9b2a2b6134f0b41f7552171021ba3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-okta44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86290a50118f79ed730c33bc928c9333f87680ddc894b5ba1ad9284f15a7ecc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaimoi-aiki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99588ee5bae34e350e31c30f547eff72ffc9325001fe19ed53a5a8ecad8d0999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c063c0e24cb7e708245f6768ee4df824d33781d109abb940b63187cfa458eaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b3d0e417852892b7de81a9fbeecc2e275e818976ddf8bc0742456e3e6acd409 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abeh-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6928594938c971c48a1a0d0b22b00383f9c74b4fdd055dd52bff9487e3206bdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaadgggs-musni-mifuysts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8d2aab0049dac910234e07c17718c0f4ae70e1e6c393c8c2a7dc885f158077d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gurs-munira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 885bb86aa5ee1cd71eeaaad4f05db908d69d2a075d815da4e312959e88b45f3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c38ac1dfb44b7448a358d3f8597e767c6836e9bf10539069821636a592a32023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuroichi12-fallen-widely (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf7478d7aa0fe927f2707e9b859d06398bd0c0b0d7512e18d79ea9628a16ae6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-coki11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b29d972524dbf6bcdb6661f7d1f0afa6b426f85585e2f2e8959ca456eb550180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilang-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8383b3bdbecd68e64616a4163195539973aa6646f6420c5fcf78cee79f8a99eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kauli-lukakimalaluavuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd60b8d5e25caf87400776dda1117283bc02213b817d695dadaf4092ec5cc4f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0675635ec1983e3fe928e9b65d211e3e9e7a83c6ea5829304060b03512559ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 185dea4dd6eb87f56a0a1c788a2823fe65fbbd18cad4375e769099b2d2512746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...