MAL-2025-171363 Malicious code in islaadams (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b0027c2e3cb3260b4c760e4da964185fe2b6b6a710ccfc6d9246fc3d87358bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171376 Malicious code in jackrobinson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c040db83a5e57d6b1df81222a121b3c4c863324aaf3a95dbd9f8a1b487b57a9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diancandra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cdae1b0934af6d140828e68210654842bd06f72b5f6514145a7b8e5b2be9026 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171311 Malicious code in himanshugarg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80702003382f45c491863381950dcaa5100ac7bd5118de97e3a6aa22f35e27bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-nofty-mu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c990dca7452be88c8eff8220d1c8de57f5497c18d9271a6571b312139b42e0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masiolan-of-doikubato (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e79ff0efc084629248e235766337e1b1f0238a4b5bd04b5fd124da61d608d0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7851c7dad38bcc1e8e54c6a08123a2e6ea41c5ca5ac36fe855584cbeae8834bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-nuyadtasfg-amantan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765ba107c0069a115640194423e62793d062ab5d6b4f0cac757263cb60c97777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manttu-rolsae-nutya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74fd5f449f0474fd1e310d0fd85d831d05ba8ba6ef30665e1163459f78b878b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-reborn36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8d861d4c9b05d209854df53211874e834769dcf49f05fa02de5dde18c8c84b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d11e8f854f89f07010016cdaf9f22c097a8173e58cb12de50b6ee9f9cc13b50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prayoga-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector effd8d09a06aa309925cc714cbfb377f911a17d7586237cb1d27837cd9ff8d13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/jzdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74751c07619ab82b88e50f90eb7a863f0a46b54d44127a3eb9f04acc197229e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dec678701eb69cbffaa908965828783380cfeca935d3381ee3dfb0982771f5ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a45035f1978b6ee25de1673c1272e22214970d1080f23b3650c5f9c3313248d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagnias-iofagiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39df121adb93d8e0fe8eb0835a899a31ab881397fd08e24a89876ffcd830936f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ucok-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32ad9a9246598e8c96766c8ea2bf68fb458823ba5621635a360a8897f7c34d22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162700 Malicious code in nokire-kore14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9efd10687808c2310a5b9ab4fc61d3b2b4f9b1c4c6f3c34896c9aafaa8613c1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158757 Malicious code in lookingan-namala45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b35f7b85e4187eb7f83e4c09f088333ddddf38bcbc94d8375a5b5920f2f0e33a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f21a743481f0f1e11b8c290c1991a305f0a9259a984b742aeb423ed7d40f2782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...