MAL-2025-170934 Malicious code in audreyclark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f9fe1071d9cc4405865f91d527ce0e3a18b3c7f893df7c2d402a41b9d56619 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171484 Malicious code in laurabrito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2fff3c4cedfbd0bbce8d868a5ac4d3cdec8ba71362b2e6dfa3418f22fcefba6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171188 Malicious code in faisalirfan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9757984041d8bf8e6964bbf47fd000b0a9830a9edfb9b30f23847426cb93a912 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171690 Malicious code in omarfromage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74252e2e82a65f83aabad892ac056ac6aa2eada53d94655ca4632fe06b372018 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170963 Malicious code in batagor-kuah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 951b83bb9f76285d8ab278f1a2cf500400f6ff5b2be38288589dbbbcbb95fd45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171907 Malicious code in spacecrafter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12622491cd7f92670048a58b3318689a6c159b4d1741589e9c666441903bfa5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170794 Malicious code in alqamiyaseen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c23e22752f1ba103d474572df6315cb5b73d699442d135ebd99bcb754eb61d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170887 Malicious code in aniputri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e81d5c7fee344cfc99862e9d96af16d81f7fd57fdbe0ce5960dd17bb0a043068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72144a8dd0ea71f0e930499afdeed14164f488bb243672ec39915db61e0a1675 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-afati-ur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5401db7eba8518d6273f5ee3be78cba5e934193a42e4d78820954b68b8d7d3fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01f9f1257881af21b8d557c70b4f288c99529d6c7f39526e0c22f1ae50f08d34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igno-jiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bad3b3d0adea6e332e165538acfc96b7a4063701925f41639b502db4d327760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ayic-iamusaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01f3b297c092b5258be0c6c34da4b6e6b7f0df16c7568ea80f499c69d5fe193c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in milraoa-miopa-muiop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6864406063171a50614aa1f8780399e6bcf4554af0e1adf0410c323181a42ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fisdnish-sf-maegwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab5002cf872d174e10555b978319bea9ce416797f37e8cc11f60440b087a5a6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75bb052b0772203577f26886c1d72b5e9f4fbc39ca7aa7b108bd2e9e0b6bc024 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in notasr-ucsl-vibni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 283fdada84e07f5d3fda0b6911a79f2da96844bdd227ab52629919882e914e97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ssseasswsf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba81b782feeb018003c9d8892d3625e7564eb5397556027fd6a0ddf356c16c02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lisa-atunma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3d3f6543f147b3cf90024ced16d5829c434edc7c90ea7fdee88f5f035854298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muda-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41cb399712f852082b69492d9b21431007b2464211ac8d6f1eb90d9b390a0bdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...