MAL-2025-170749 Malicious code in ajmalhameed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc700a3d66c6cdba530180b5fe11592f16c9e00c64bb830a18022a994cd10e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171987 Malicious code in vinitsharma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6742ebb05acf693f42e64f11ea7ec37949599af2dce5c0f6c206061f2dab08f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171102 Malicious code in deirdremurphy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f017c0f73882d9a27f465f61bdb297712f0abe6f24389643da91d3f7cf849f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auyia-iaydut-daina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e90d23f5bbbf7df834aa109a4660c5d2bde19e821253cc869e49d3f62437ef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5dce92f973e167e33806e6019362f1a8ff4c61bef884ab37826f90b9f6314ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losiat-dulaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f63b52aa9331498ace8186994623eca9e019e49dab1080f7ae0a2460f9ca286 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38f3d52b1be3433610276661c2f975a7a2872427c814c8981d4956949f89edf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arhani88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e954f06e9de4be212a78d7c0a390fa974db0ab7ed3a290f14035a2862b831e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabu-nali-lfbisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5853cb07fe0f049b49170d7874d56a2e2a939baeb8a8ad8e4abec4602bf128e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c237f7cf0c8501dce0746c0c34c0a459ceb7fabe3d3daa638bd6994abb1b33a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tical-bisuya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59a16e7528c3839332dac45e8816a91ae061ed1519be4aafa345b76bd02426e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbdf585391d9b78a0fd036177456dc3866599a3b4c7d07b1f61e0191540c0616 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d027f473c5692317572f6b091b8bdff91b1f5700fe89b0ae3c8003025205aca3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/pjpr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0794131e45a52ec290eb94a28f02802fde3e7a2163c28e19a4442de0f35d2bed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-agaofkafsf-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8abbfa987456f57c8c87facc77fc6b51fbcede5fde071a5542a25006f88def71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-kkisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe9db59345adb24132d895fabc9db5fe7053f94607df1f652afaea2a9b10259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/wedshj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1485f8b3d28aba9ec74e6c51a7f11a29a7f1434e44ab1e01d8675053b349cfc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69ddfff54a575766e3e2eb0bb3597770c2b779992d15955d80a43894e5446d2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 211ba75a2f1623c497a7b3c606e3864a269f428de7cd2aca507c61a04b2be211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modira-fuhopia-janai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3bb51ec05c64e808ec35a914f9a83ff48f37bae2dc9e01cf31b23cafad00905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...