MAL-2025-171447 Malicious code in kashifahmed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6a7250462c6005447536a2ab8ce7bbe3666d032741cb1baa3156b8e9073e065 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ghassanmacaron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2707886dbab959771ee40049e59f05d60db2ef5d2e3d6d23c2fe3a3dbd3de790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171325 Malicious code in idreesameen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 915700582f587041b5d7f9f798e4129744e78957f7d83b98e22658253b70c62a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-udik-vamuajua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d453357b5e49a633852203eb46432d6fc9a55aa4ed5edb7bebf25c4696cc5cba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manttu-nuyatsi-muadfiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8de943658d23a4170432bf3ab4238a8edada9af2c56d831a06b72babb631922 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedarnan-nufat-nuts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba72f72e3b042562c88bb5fcc1697c6daa8609a02d5d74b43b36f4c2502bb6f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c59dccb0cb40e6a2239607c8feae865971d717277b33047820b26d8fa1f89c72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuda-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c12656373f0815405bf438ff55f8471e32470ad6dd784beb7b3bea5888cca8cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03a7fb436cb76b3a082c80aa8ba9463f93d96e491903fe62e5d5e5a73dfaa6ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170048 Malicious code in uinsu-lotsi-banbalikami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f17c8ea75aaf214748563f2f557268929e91669abc05d9b55e22caa0c2e17740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150608 Malicious code in @miptaa02/fahg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80c016b6e63e41e6e44a3b8d1b200e16ed6784f28c98ccf8e28a4fe8a0ccbd26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168380 Malicious code in tealove-naiman41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a7fc92bf4b9a74fc03d5020e36749460595b50b49993fb9aac67fb172fefacd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169306 Malicious code in trevora-fissa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f8288fc10211cdaaa10dfa5cb4c752ff9c21c868825cd75334c15cc536281fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167576 Malicious code in teagood-nalikoli23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c77b218072691559c77e77022422aa011f2ec738b5d3400accc22df4d5627e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyadtu-tyt-daut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a1fd714a418c246d3daa74f9a64cfc30c8076ad27d3fd7a6da25bb2210c7539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inagi-vumayfe-naba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c2cf4555c66ca48ae79c54eab7306dcb2cc326510bf2a259ebae656b6e57159 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-lniu-kanukakili (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56857214d67b3876f84e72d99d7c134f33200bf5e20012bb3b739e9b3787af14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-aiuga-uyafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b4035c7f099287351a4bafafe6185eef8316622173a8806c0ce9b7fe9e4ef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inagi-vuma-nuagbarifvua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ad1b22f8da427cb8cfe59bc7287aed95318eca2fe5450ce0301cc485b5000da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169798 Malicious code in uinsu-lis-amdakinu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7e9eff065e8e15c9072bd0892e6096cc238936014bc739af7eb41244d2f5b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...