MAL-2025-171260 Malicious code in ghalibbasit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b19f78c5cf6a263acb76d84cb0416132e26e1cb1b3466961510a6dd0ca44dd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170888 Malicious code in anisetoilette (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37f9e8a43607c7c9471c2ce3968003cea380dd2b33ebe9534446db27ee664fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-kalimasa-nuivauba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b697bd3293dcf4b5be56694d68bd714487c35a22b0345195819951a970f9eed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahmuda-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ec520ec9c75b25261b4eebf092c350f6f95a43143ef0e4a7d67ff8f88a2aa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/dggfdhs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 825d6508528d004fea0c43bd5e8c3a8666fe45b18f36fdd9bab90a2030acd846 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb06c112544265d0740e01ff59fb8172d2a0a4c33ea3a6a7f7a9f6ec615cd0d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-frauhfu-faqifda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67192bcb20441bb67e81714886b86ed20cb39034a3ee98b33c8e26fa0c830e83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efecfdfb0260405c8e185b74d55e62780243aaf27a23e42d55b98f8327a0d9c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kuli-lukaaluavuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad4b21f81c13511c5e1fc5697be387d4a65a7c420f5f3f6b3b162a2bdf46c0b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ee1a6bdbcdf84af057274809da2fdffae6c59fac85f13d9c9f414d2b48537b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/iraa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70809bdb535f2261d9e8428eb9bb778c57023cda81f56b9853ea9d7d694b3955 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1149a74def76737529f5ce87d9d431a6f21b88c7ee6fd969aa4033195b647143 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otmban-iagisfjafpsffo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b74ed88858157a9d7fd239c21f3e5f2d24a4dfce16e7b00ba4fc9f0eca68bb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manttu-muniape-nuiol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 867ef719061ffa5987094c2e7a1b52e4c60a8a98bf81f4ce68e11792d6ea39b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abih-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe2314da1fa11f4c55e686e2e7f548143c8b2c30ee8f8d87faff94f061de0f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in monadi-nads-ka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57aad40cb840687e091c482bf1f66aa81d3ba5c84e3697f51e7deb97027b5d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iqbal-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a17fa2e5bea66554df48de735732219854a8480318a068adb6ea27f12c42d4ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-darusd-bruneid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc3a4b50009ba4ad44132b63a37a20a526f0a04a7b9e35494b3bd5edf9bb904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaa-reborn24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 590b3452d71b683d6cc37e7c64bc478afa25ca505782778b5990dfcfec9f4938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/tijfx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912c20338aee77a18dd14425e3175085d6b7f165e510e1939b4c4f6de883bec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...