MAL-2025-176691 Malicious code in nuilva-bavam-madivabunav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3838303c4066924dcd346ed83f823dd2966a3344011a7e59f043bc358bca976a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ishanchauhan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 798ba292eaa137123d69ed4e83102530889e81c196e1dbb703c1d837a5c36dd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171323 Malicious code in idreesabdul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bde9e05aa81a5c4b1e701806314cf23e51467aa212170076f41f5a4e8416a94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manuk-nangai-ignu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec4267ba4299f6dffeb7f4d9225cd3b5ab933bfd54b2cc9eef669c86448c1a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abang-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dce2a0d49e88c1e6a8e1df25bf927386128a146859592333bfc72aadda03850 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8805e3bafd074f822613e8c964c0918b538efc935134e6222fc989ff33409e7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161762 Malicious code in namadata-munaroha-buty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edd44c68b18a9d34610aa359c90f758f18aa72c52bccd84158f797f932ad90ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163832 Malicious code in nudela-rahfaeg-naha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31c9be2e202a4155245e0b9710faed303c54aaeac729623c8963409796e82600 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146173 Malicious code in phoebe-publish-gemini-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c346999cc24172ed14d568998d9240bf3ca1888626c6c643f1881bc8aba87b96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-miemee18-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b84b9509c32ca1149e93423f245672e6666eac17610bea9c0fe96cb1b3f7554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-lumpur25-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9987726e65dbebcd5e0104652f8041ff61fecd19893705b59ac320578974de26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137047 Malicious code in smooth_llama_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54deecf1294fd34af0d789a5902a677c48b02957c04598b625a0c9fc6d2fae95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-kacang71-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 701db2d9943e2d417b1a56ce383f776600b27a3f173464d7daf405b482b9b0c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124427 Malicious code in yanti-dradag19-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49bcaea5f3ff431a0776bcda0203e618b788ca237fdf1798921322e63684d018 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misty_swift_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f5f1122e9eea98df1ea4588485393aff35bd21475e1f42a73fb045c5c143429 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-bika79-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80bf7033b2016bd7ac4d898ea78d624d7eb03040149d97483fc1d03c31cc9081 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-kue30-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 345cfa9d8f37f9ce79784ad7e38cb2af46d33a5fb09de76eda5790ca69b2c1a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-bakwan19-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ae195ab569c7acf2a1b2ced078aa07f0a0f75535acfd03633266efcf90e727e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-semur38-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e431d9d479708b522ab84bc00c7127e6522b6159e2f0085512197566cff21b98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80977 Malicious code in riana-kembang52-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca93a6a1c96cf22e3b59026e0c9ca1738fd25f03b2b785466ec1973afee172e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...