MAL-2025-171655 Malicious code in nicolascarvalho (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 777a6fe5f31545fe3e9b9e11d8b26edb42f7407a40feaa3db7d8b959cab1a461 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171130 Malicious code in eclipsevoyager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52b4b3d9ec4d7c1c71ad0be245964e791f240e70c5261917c23079404905f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171887 Malicious code in solarscribe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f07caa06740b3bbe400697c486ce33466b7ea8a3af2bd7e220d5ace167a486e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ijahia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d1e40db3fd81f97d45845e5ce4c845ac909d16fab9405bdb6244f5b0c7a8833 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/redx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2702f561ab8f3fcce3e6c78a772c1ce4699b3c9cbcce8d42bfd8e6e2e12e36c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/sdada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f538a7a3facd8ff339bc12f068cbcc35b5fdc61bb4b17517e65e814bc3d412f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/gupuhsr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5358c757adf9ffaf717bb2b42db05144986181c27e2d690481110dc2c789614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/wjgdub1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 071cea5e1711c92b9e718b7cb65480e667224f331b52135aae4261ea87cddf09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fshj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2930924b90de23ef79484abf8e592c084d7858d17c94e1ebc05a12c5ae387d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/gaxody (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1f89148f7153fbc42e9751216e754220e1cde6570322a50c41071ccedba5006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/iifj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 958864736a9a90f0297d702e86db536733059eb87b7ccf39b6327b1eaf5d66f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/reya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f555e866ee0ade359fb443b2f7caabbdb5371a108b5d758f614b4fe7b3f3600b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/tfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a78146787eec10e34c2e732a4a2bb559fda3290016e3ddff3ce9b96d0c4c80ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/tia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65eebe337cb428e149392633fb48c56118a4facdefc04c7cb3c0fcf132052c5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abel-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 301e213484256610e5b3ebdab343c1cdb8c0b373efafcdd62016e76dea44f42a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiba-avi-aumaunaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b6d8f55d159ae16fff8fd8b863dd9951c19710157fb170de8fa8c72e80fa18a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiuna-mobile-amaioa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 694dd3511f1d2f6c510c6ef7e47c6fb8abd427a140999206c23a8c72d9c82f25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciydua-idut-dar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef8dc8be20a05656cbc415b836e5644b3e9965f7344e880daff134045d194c4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyua-idugaat-daa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86eb0ddc22d9c5967e9c04ab458dff532c587cbf3d8c1f38a44bf40540963cc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-miolipe-apuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab3900aa3c9a322e9e70ab74b3fbc269604433f8b0e28da54c501b6420541230 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...