MAL-2025-184383 Malicious code in modiov-kihn-afbaufcaducxabcags (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 795ef6687ac9e431738f91f80e1f0dacce3314a7bdda196b07cec92f45f353a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182752 Malicious code in inda-foji-gisaguan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9380d1b4f21e3bd5a1912a41731498cb60b03749447b714fe0620d8c47ad7f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184285 Malicious code in modiov-kian-avua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6c94c9daf1d0b0ebfe2cbf1b84ba8e05facbb2357735a7e4ca67ddf9cabd391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183697 Malicious code in manu-oi-gsisoai01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd6b2994b036b00f72eb437007a35ff38fec0e673fc5e120f22084eadeade3af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-ilo-cvaginauovhu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4da1050da4d6710ba552e19f802311f63f2c70ecf0a1cc0d99896408c468af01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-avcafivaivucd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf525489915a657b93439f3193d72680c573b1b7ed79390d0674d4d84c7e981b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tifuacfivafav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc53fb2fceaedc62007a2ed69f01d766dd5aeb102ab8bf91ca84f15cb40ec46a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183230 Malicious code in kisut-difg-diwf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34017876a91447b7aa3d078ecabe1c0a60a3aa0e09cfed6dca1e27ed50007b4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 072fd922e4d4dd49f3d66f95ae3c726918d2c4060dfed6195861579ef715a4eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae1eed41cb03b509460a241c9e5c3b40e7f1b9178aa86af9cbb5150163997952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 924308bd680198cb5787d818c355a118902669ab9c272befdbfeb91416d726a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efc4d25e46554f51833bbd0528d4923b060c5a48855ba01c3641d2f02c320716 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/batu2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7950792f3fa68ac5ea0589ac1fce4b10697ff5cc35badc6155403173fb09d918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93d81a69640cf493340a1bdfa71f21de8a0502ed44adddaf5fc2eedcf2381927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faee3a78333ed73c52d7333f38f7e4d5685d9f5759811b7290d82465f9961dde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2994e50808305049a3ed4646e9b50d3633e7a856598ada14ed9983d993d858c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 039ef11a13efbc33e5f5fb9dc1f9ca288598ead02e26ee795bdc28d6c7e5e5fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26bb9f7b1f905e65b361207481f6bb2a7fe5bd25e336ad2dfca52cd695ec1aa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geulis94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae36761dad348bfc6af5a72f56762969382db878c053676dc81c54d549f8df2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/batu11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bbeed5eb8eb657446bfc327d377579ec412ac3e2969f75fac4b47432acc77d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...