MAL-2025-170840 Malicious code in amjadfaruq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1efdffe267be9041329bf195bd5f82dc78aca138e8f21a7fd12a393257155f90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171395 Malicious code in jagdeepsingh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ae0379b5809a22226fc33fbe27db90920105d77ecba9cb7a8663cf60c4865ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brooklynrobertson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eafe1ae3d9bfaea89fab2ffbfa36abe3cb5d9244f0ed20d125d6a58d38e9df4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteorhunter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64025a0002bcfb2c6909b9ed65731a4e9d018f0c193dc57b745fb03fce3b97d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157620 Malicious code in keyla-poke51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e48ea330732be1cc4dbc2553a93cbf5d6667d8105a56bf6969bc7770ea66c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150720 Malicious code in @miptaa02/idd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2df6d8c2013e24e3a393c6442f566c084224643cc946955cb52be95058f0da9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158078 Malicious code in layla-poke89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41da46082f5805d04c6e714f63158627c48d3f21e135feb960c0a28997f3e840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160998 Malicious code in mursai-nudty-ssda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b27f288af5a14626a84876f61d0a1f9e2c03d78c1918e11fc2756acad11add7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-pisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b32a80dd3859367bc4874c07b1f081de4cb2c173ba9817f2db97626016815bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatidra-faradda-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1876cf3bc90c481fcce39514b9ff52414343b152bbe8f878251aa4c551be0eb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-fuaf-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2aff0e1d95981998af3e3d973c7519ceac7266aec1aee05542da8eedeaa4b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad3a6f61e0e88cf5414d4ee7c24671ed05f4f23025d32e1df09db75e3b7a77a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upilka-luziub-iluanoui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3682cdeae5cb43a1dfece83ffab3895ea3d163facf5e053a33db22a90f79475 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53cd4a233b6da00c404d30aad0c7a69337c132d083bd6fd61e10f448712eecd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165472 Malicious code in sabua-muyaig-budauafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c867efe7324685862ad50ee3edff9da30704ad7f2fab96ac8f2b80e25bd3b99b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32f8dc6a0a6b31feb019996110f3062df4b4f5b86ebd1257fac134f536155c6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0054b34cc3f46a5ca3822ff49c5bb8f9488f3e4609788df8c1eda134965bbd6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92c5167e0343f471aaec03094927cda57a3f7a94294bfbe2d221c42189e5b5d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uafagarug-mfie-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13c454b75b66fd77123e67afb844b9ddfb203193877b028d175c0831a351876c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdeabde79d1592b464378d25a95c6c57b3aad5854c275f37dc623d85015947cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...