MAL-2025-181216 Malicious code in @akunsansan0/biru3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e6ac633cff1fd7296646ca5c16332fc4a578d5ebfd532d358cb23b2e7fe558e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-py-vepes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ead79ecea98073868c95dbaa2347d27243ffc07189a1c5691f8f01e3741497c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-afncg-avf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc05097092a28359f93adc9703a648d557822854d9821c3d0ba1c4dd5e39e4ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-hevopa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 962a6d79679bc0b3d206b4b1d67266aed2626d91d0716d6ca78172638a52fb62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-hole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d06ab6fd48505b0606fec0dac2904d4912ed7f9ace82f10c3c8d6b5891ca4fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-jeje25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ba2421230fa57f4354802a2e4008ec1b22e8d1cf249d89cfc3e35e40b0db88a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in a-pem-misa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3ceef2f7df03c24fc249dcfbd60e7876462e0f5ee7c613d84dff849cae53728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-faig-afigufib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75ced33b129de727bd99ab4dc09e5860392cbed7fca0cfe8e325a29bf6810ff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-py-wava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66d4e9459ad68a30fc06e75b5976707a940b7511b144589068d35385599bac22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-dfg-dufadiuyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41629e624611db7dc87a3a44782e290051955a2a53c61a9289ab360705ae63ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anabuyil-inpa-ninni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 371681746b726fff8ce4d0a4abedbc3ecade98c7553b6bca43ab25958e3d714b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-gohsep (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a51ae6378b9d294c0d2eab002886ef7e77b3e2547cee5472abc11cb183c7bfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-nojomu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01e63a5233796cabb54b05c16c337f6d0a6b340153cdbcf6230f976ddaffdd64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-epadav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9488a978b37fd0ba7c621c4c8f07b498bfe4978407deb7cffe1e6b96e848e430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-urapu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9380cef82872e3ccdee7e5519c2ab04e168ed707dc179e1ee4a94ae82672d4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-zehnap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0182aeddc2e6e8dc57be123afa9a714542b7e056670cabd3cc08d5abd9cf7dd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anabuyil-na0n-luiahuas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d6ee69e596a682705f207107f34e0c10882e0761347944b1f2e97cd5565c4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-kuri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 725fa289734ae3804584376b7026694a80bd274fff48faf12026056aeb32fbd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-miolu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 253343a06afd372ff8afbce8ebc8b754fc2b065293ea89a35adc3216f4f83d7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-ulwe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcb640ef85a60fe2e3489537c69965f269d02da56c3b9c1fc17b4cd7e93839dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...