MAL-2025-171390 Malicious code in jacobharrison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da01c1e9c16fdb122542293d4c4095f2d0f07030de02baa0e6813a58a1eda966 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170961 Malicious code in bassemcrepe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 752efa74f58611594979754a889680f9d191b377a87712df7095e10bce113137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171023 Malicious code in charliemarshall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe322de2f914cd1dc846270e59effdb490f2c1acb35e7abb68c602f5090f8f02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171198 Malicious code in farhanjamal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e8507f9ab04d48764360da3a9fd9f4354f177e1c5154c4d727662ddcb9dd93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-buysaa-buysad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9df754c1de5e67903b96e086c1aa78fd97a4719e4db758f5346d14c71d306b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuyilbani-nikubamia-luyahuamubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a17dee6fe19abf9406ffaed51169414831c7b34ecd54c47a3cc19f8fb1d79d1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manuk-nani-ignu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5e8fe7b7382716b1bf0b9621ae66b8e13af0e095751ba51abf595205f14404c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c4f7f89517f8a744bbb82594d554d248e9580227f49b2fa02003e73766ac3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-maranefu-safari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef3edc9f3d95a8b44ee35eab6e06936d880fc6712c6e10a4eb805b3ce4dc2904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-ai-upuasoanmio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b2a9ceaacfa4a77641b2d804008213ae31397c9e607c2fee57f7b9ac0b2d07a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dfd32bd52e25059b11e46fef010ae60ffce4c587f9f89e48ea159b6dc4013db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffc1122ae37ac58cf09041bbf6d124020c4b1f9d09c3e2b1ac64a0f62119194d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/jns-s21r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f74b3dbcbd7142102c31ddbec6ef4472047bb2e736b05a1b959d20c2975e3b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-djoyi-fssae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b45479e52a097cbb54b8be09d98c5edade25254dcb0a1e8e8d16e546db5c5fdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ssseasswsf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba81b782feeb018003c9d8892d3625e7564eb5397556027fd6a0ddf356c16c02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5eb25dd4c172adde19650dbdbb5ec04c2451b581f52a274a777d8ebcdefea13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efdb12d19682df07fee3c110f3f1d695582766c6cc51b098ece5a1f5fc99327b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-ud-vaalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 661483ea68ff843019185bbaf6fa0368f04e079427aeeef043dbaa86a4659ca1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapaogfao-safa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae7180dc028ae3db4c32b0ec88f517a269162a25f51331e4773b3c53dad4a6b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 152313de9cc4922b737c1957c982f69d94647222dcaef51128b791e9572be12f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...