MAL-2025-171290 Malicious code in hamzafahim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b53a12a7d281c794aca8b0ad778ab0e1c39c03c0640da591553ca150dfefd6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171858 Malicious code in shankarsharma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d719c747bdf5b4baa1bb6b688c6c291b23eb438f95b9954c02beaa96d83f07ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171260 Malicious code in ghalibbasit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b19f78c5cf6a263acb76d84cb0416132e26e1cb1b3466961510a6dd0ca44dd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-ofgaf-gagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb206e957a02ae82f8e043cb27f0d5cddd775dc2f7d26dae891ec0adbd583757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ramadan-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50b35ac1cc528ff545e6e4afb1dad5c7b14d42825d7490d65046ee652e08b64c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4927e10fffab39e4ab50aa1dd094909d58553dcb9c36ebd87901072c716e486b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc76f2716d3956d0e1cc75d732183a54465ada97cb25346477343876ca69ad0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansa-nonatai-amutgiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b5aabf040c87d26a0a5852e6793deef938fa02422340313d51541d87ec14059 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e66aabcc0d1dfce0c5f876ca005a4becb8ddff119d84fcc4016fd2ffa921ce63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciydua-idusust-daruu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09acbee28216f791cd75600994d0a019054d208023de0150f6ea2fd6632e9ef6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ayica-amalaui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 834ebcf9982737f49e83081c7805e6dc56f23622dc5fc1290bbef7c09a47975a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-butya-tsyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23078361a574ef3de85cc256a2ebd13f184a8512a0c7d8a734b284b4612543ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abi-alafi-avua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c388609f2b78c9c1416ef071cddd2593a7fec708512ca3c9315e8e7977bb0b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-aiuga-uyokai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f6cc3c974a978c6a853b16a0cd6915a605bf3ca2929ca60a0f75ed8a12f7281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f8fa9954118e2c98adb295109704a5aa09adc972382ec450f5727c03b6d891f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gurs-miptahu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01d5db92bb9d76b904da5ad88a89c6315611e2d23ef462c89759ea36e55b340c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da23cae79d147fde94f3217aedccccc163641964e9802312a10a6bfda017a42f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiba-avbai-abunahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a79ec08a947f9f42e0820ae37852f0771cc4a66b79155edcce3c7b1a13c93bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2d426de1fe800536e86b5b66fef3c6f22c878b0b7be2a3d7be312f022e22cb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46af3ef6492b69b5fec4a13291ad9ff5686529034cbfb3c5603a4de75a9133bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...