MAL-2025-171102 Malicious code in deirdremurphy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f017c0f73882d9a27f465f61bdb297712f0abe6f24389643da91d3f7cf849f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171720 Malicious code in planetcrafter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c814ad361ecef6d631afd4adb79829a86eef3748e088ff2a9dc1bef17de736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172000 Malicious code in williamrogers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6be7257322376c281f770f3b0b1d176eb2a118fdbd3d293c50bb6a6454998458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5dce92f973e167e33806e6019362f1a8ff4c61bef884ab37826f90b9f6314ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38f3d52b1be3433610276661c2f975a7a2872427c814c8981d4956949f89edf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabu-nali-lfbisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5853cb07fe0f049b49170d7874d56a2e2a939baeb8a8ad8e4abec4602bf128e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/wedshj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1485f8b3d28aba9ec74e6c51a7f11a29a7f1434e44ab1e01d8675053b349cfc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69ddfff54a575766e3e2eb0bb3597770c2b779992d15955d80a43894e5446d2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 211ba75a2f1623c497a7b3c606e3864a269f428de7cd2aca507c61a04b2be211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c05c2e3685fefd83c7080e3c59848c308ffd49abe31fdf50f44327aa5e2b5023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55620720d9902586a364ec179c5890b350db7bfa639a4141deaf96f94f31fc0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 013766ca5c7b865b8505d7a60e00c5bc2e412458642c74bf6b0e6c13cfd3a8a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c08b48971385245fa7726e0cb92dabc9f51b371c655ea307fefc6b818c196a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jele-rasaaya-nurses (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd7e93ac6bea9cad22247c50a0e035c7f06e19eb0d85067c627b4d0be4c0ccc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nati-espanyole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87d671688aa4befccb96383037d56a8335a876409687fa9ccfd56001521f4569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d675ce992f27e68bc6f69a7db2973cf2778837eb9afca9e8dfabd3777c41972b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 152313de9cc4922b737c1957c982f69d94647222dcaef51128b791e9572be12f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bfecfe2af4a0bbaffbb66036f40d798ee685737c7b56cb6f74d239368064250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-ters-brunei (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf61a11963254aa3db03d65d92a6ddfead9c0936c766b29475340b1f3e9ca38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df64f143ebf5827d222ee6f373ac94abb4d2b33e33aae3e2cbe678760b9f7385 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...