MAL-2025-171290 Malicious code in hamzafahim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b53a12a7d281c794aca8b0ad778ab0e1c39c03c0640da591553ca150dfefd6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171858 Malicious code in shankarsharma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d719c747bdf5b4baa1bb6b688c6c291b23eb438f95b9954c02beaa96d83f07ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171260 Malicious code in ghalibbasit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b19f78c5cf6a263acb76d84cb0416132e26e1cb1b3466961510a6dd0ca44dd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-ofgaf-gagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb206e957a02ae82f8e043cb27f0d5cddd775dc2f7d26dae891ec0adbd583757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ramadan-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50b35ac1cc528ff545e6e4afb1dad5c7b14d42825d7490d65046ee652e08b64c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-butya-tsyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23078361a574ef3de85cc256a2ebd13f184a8512a0c7d8a734b284b4612543ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-dddssf-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f615399e9275068bf31d8c416c295c67dd936bd6e9d3f811bf320ee5cf6849d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4927e10fffab39e4ab50aa1dd094909d58553dcb9c36ebd87901072c716e486b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc76f2716d3956d0e1cc75d732183a54465ada97cb25346477343876ca69ad0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-molipe-amuaaiuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64ee4b66724df25a49882334d10db950147d415cb0f6383bce94d028500bf264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansa-nonatai-amutgiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b5aabf040c87d26a0a5852e6793deef938fa02422340313d51541d87ec14059 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e66aabcc0d1dfce0c5f876ca005a4becb8ddff119d84fcc4016fd2ffa921ce63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciydua-idusust-daruu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09acbee28216f791cd75600994d0a019054d208023de0150f6ea2fd6632e9ef6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157752 Malicious code in kuinsu-luki-kopanusnataiabumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b51e7a496f5bc440ac818b2735ad6f01c2219e2031f5720ab6d291cb4c8671bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166311 Malicious code in sunden-dibiuk-itarunyukia1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fe689b6778111dcd57e7da46b36df5e65e6b8e379fb2f76efbf028ad2390d08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151477 Malicious code in abiuba-avimungi-agatoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7895b49400c01b2034bb65ccef3d0667d4709e5fcf53797ac9917538552083b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162881 Malicious code in nokire-loklok29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 717d9656081384ad393f765d516aea6193c14bb5f3805bbc15ace14f37be55ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153680 Malicious code in billa-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e262086b55578ac298b18c1228aa197dc51a3760eeb72020a4dc5615bfe140d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152135 Malicious code in akabia-alfi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ca4e1ef0d8047b9bfe02a00dae1eddff84746e6f0ed944c011fabf631b9924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f8fa9954118e2c98adb295109704a5aa09adc972382ec450f5727c03b6d891f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...