MAL-2025-184607 Malicious code in odasv-knilu-bofvaun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b7d2949ae9fd03faad8cc1d3644f423b4136e154dfddd6eadaadaf8fb424b38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 157f29442f148d3b344103b45865c1b2ddbe2fc0b35ef36d667f85ecd3f3619b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0844f9ae856d5c7d2c514c910360a6844f96b7c26b43fff9e274975278de17d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181527 Malicious code in roti20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dab0e4c176ce580b76fb0d45d46fb2799e45fcdf0c2b5d0374c9ced5793eac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-wuggu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 595eda9e8f6b9069b18ffc78f6210d51d4c1bf0bb50d4d3019da0e96eab79fa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-zagub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 945cfd83e1e95cc897f5f672cfe9db99043b98a3f51ab02804f2a950a400c234 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-py-lemcif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39bc5123ca367feb9da3655839d1ef8499e0841982dd4e532df30516979c9a53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-faig-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9322dd7e911d2b5c30b194e61b11513ad026ae616891c2b14e49c04c7c00ae47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-utcu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1819160860120212ba821223a1b0e3d4b52fe5545162639205621310133a303e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181061 Malicious code in teate-thy-sonic-voze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 714e89d9b5d48ad3bae6b65d0c529cb89636e1c664d69c68b1e3874991756ac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179892 Malicious code in lookingan-jeje21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbcacec204f68acb365b423c6b2e6c9b5bff3e3733f720b55a6cc80be75401e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179705 Malicious code in kisut-faig-dikanai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd84ce7273b77bcefc804e137e81422475c699b00997dc1217bc67dbb6322de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179972 Malicious code in lookingan-nanakila47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e1f5ae9d5a6bfd5aff3727864b300aaae2338a61d3ba073dc69913ca4ade376 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c5d950a5a3557187bb0d81828abcf926e87d8bde169f915cd0d243476e32402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joee-banut-imur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df37561c1a312818dd04cf96721eac76486e0fa2b18c977eac34aadc385e576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afifa-gomagiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 592e251bd417af1f259684ef68e2b8fe8574fd0fa6d36954dffad77fb3108ea0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f5e4d8a610cf9d45cd17d0b0205200a22a6d6213096f66ce2b5bcbe1dcd106b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d81629a108c1c22751904c02fdca540020590588011d855c481b9775f8a2895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-maba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9793f6e1b04ac73449c530a401f840f1b8c010487fce0c7f38b77df440daa14e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ibhghhssabo-sgahsdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e5fc7ba39df629d856c61192ca7c1d26c102a458212f454e155ce5ea23e51e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...