Malicious code in mibasdah-natu-munfsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa0ea8261b7d886b41c8fc3ce6a7b53d1696b9753c47b381c463aed330715a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170793 Malicious code in alqamirashid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7102f48a7bdecadb7f4ed91356a367a65daa5b56b8087f384110ba3cdd11751 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155250 Malicious code in flight-dan-ufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64cb6fe2d9ba8e11b280bcecc5e1123fadfb04e567ca37fd14c45bf37f4684bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169448 Malicious code in uafagarug-mie-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1567e3d9a7fb4d215b838414cba9cf0e77f074c214b5046e61a8c60f3d1d59b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c98b8ce346ea83c9593056bd79470b59384484fa34a67e3b2ec5a93f9d88de0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in figures-lacerta-ceres-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf441778c71088799e3df4f5fcc29bae87a6efe489abca752befa1db4e635cca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scorpius-upgrade-spica-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ed6f3c60cb602dd42909563e4d53ff2103fab5f610611b4fabfddc2e51955b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-serabi37-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deae73ab5ce768e2f626a3e2ff5e3052d195f0cd3fd0578b13628b20e764abeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-takokak87-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87ad9acb6c8fec66643a7d3d91bc967811c653b0251f548fe3d9633e1183dd65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83399 Malicious code in bambang-ikan64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f3f554cbf07789454241a19cf1575018517d8772471c2127fe673bb10c8116b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-tahu99-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b3be779337f68a738eea3e84c2683bf12080b2f83cc1d9b19a0c87478e89f97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in educational-white-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b30e9d30e826f0607a329ce5c07187d1465ffc4c7d10a6028d2c8b25bf2ebd24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...