MAL-2025-170863 Malicious code in amjadrameez (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1501370bc7c437d1bf12a2077a0971092c7abb292c423ef85d65a29f4a14c342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171130 Malicious code in eclipsevoyager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52b4b3d9ec4d7c1c71ad0be245964e791f240e70c5261917c23079404905f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170733 Malicious code in aimanraza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca3d48e32de1a4749a987a17f4d60d468a2017b04565ada02f1e14452f6001a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciydua-idut-dar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef8dc8be20a05656cbc415b836e5644b3e9965f7344e880daff134045d194c4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/lzgh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f59f8008f90660c0c70094341ff1710dc7f999eb0d90c2cd95e41cc159baf1ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotumafa-anafoaaaz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79261394751ffa2dd2a3d48d90ddb0a0dfc9019207ba9a663fd88d3227270ab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nanami16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0930cb1e50c04b2cfec8a79cd09c396bf3f4343bdf1d6e5d855815384adae800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee088ecc851159a2e4c482fb4ad70384cbba1597db93f39882efd164197bac86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abibuna-mobile-amamiua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f62beea9004a570c88274d7815b898e0066a790b4d4d34f5741094bb70ac1f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-dana50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 612857646f3e55c836dbaf2b30b5141fc3218b360c25d382535b25e12046c902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ijahia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d1e40db3fd81f97d45845e5ce4c845ac909d16fab9405bdb6244f5b0c7a8833 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3d59f782ab14989aaee70585f256d0af25147af6bcf126ffce592179a5eccf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upa-lubalaulio-igsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15da77878887dccdcef9a29d220183b57f62b98f26b47179160deffa9e412c22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irassdhi-ssdss1s-rwew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f04b89c6d4ea59bd4feee59bac0fdf5fbfaae09d688f7c423edb53790fbf8bf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nanami12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b727a77f703fdcfc6388ac66e1709f116ef22a75feb33c74bbbda5341e72b609 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilava-dakgrae-naha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9466f48fd1251358d41345a742dfa52f1a86219d05751b4a092f5d0b257ecb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namase-namuada-baukmwmek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2f95e045a147026327b35c18606a4da1115711c663e2a0df790c4832d93ce6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedr-minu-buipenajaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37b0200e53ab04f2133ede6d64fb4e71340505366a0162655a6ea0835fc31cf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afgais-fafdosafiog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d96bac10b49d3ee888d6683bf3aa5cbde5c9dd083aa7470562cecbac510aedd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff788d1041f716ccda64c5d4fdbb35383f18d46ccb54be00c6a7e975c69f8a79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...