MAL-2025-182419 Malicious code in imodiov-kufni-acumnacffgteafgrcavefac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 665557ed3df870a0ff5a8093513390c22744013d5ecb152637ac5a7d786d9c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184506 Malicious code in moki-nik-hifdagujbaah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd7f963f1a45881a3c00a3c88cdc940d5d6be95bf8649323020e64b074c66268 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183741 Malicious code in manu-oy-giososloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a97933721904ec7c747f794907b73b43493dfb6d0a983356693b1c7b650619b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181924 Malicious code in flight-iltag-zilauma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b656d74e1d3869227cd57afd89e2feb5e5721280b2e652b6e816b915b6b0d682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184232 Malicious code in modasv-kuu-bo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5abccd91c154d7a48a02562b3b40b3db648701bca8a3a359c19375339eaa6d75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183016 Malicious code in itale-dci-rrusysyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f42093684a00b5d297d4b3b23901d99c50a178355920d27359621806336f66b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183766 Malicious code in manu-oyib-gikis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4ff88fd22a1deb18e2cf39e9cce0f0f3fd8ba5af314f85c971830db68ce6170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-if-dakiak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7beecbd642954cc1033c874905fbfd1c3137f74a9ab536b54cf8ee6bb7ae2846 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b24d9c1fb43b93059d24ad0598bc636e7b55ca4614303cd93a78edb37f0da9c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4642f9fda8b5e9d61b55a0c4b891e0547c4e0173eb462ca26f5883ff293cbb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e925b928e8cc2ebabbc5316670e9ee5efaf8b82a10e719b6ef8c7f389ef7791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d2629b933c76aef884e1a71e636e6e7e7a2037a0f8683cafaba6a987583b8bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gntc_94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43b361b241a353cce33e3df6a9c52d2054202e85937c822b65f8b096a8f4e4db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 072fd922e4d4dd49f3d66f95ae3c726918d2c4060dfed6195861579ef715a4eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50b688f91ab5fc8b7e22acf04af3867d5f53b468cdebdc0b93db0b5da1cdd748 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ecf5026be8d51ce239af102f511c88374b13c008411eeb161f14452213fc53a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b93459be333114b10914381543e8339fef21f93982504492e991af410209b4f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guntur6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8b6c63eaabafd4d1696e5b9f6cf2523596548a56fbf46d0561730ebf6017cb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/jorelat6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf57ad73779cbb8da2740de34e92a8cbbc3d23fcc0718aa95ce0946118a1df25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a46d594f19f1f15acbaf19198e316745ddb1a0f18b65ca0dd920c8b7537a1def This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...