MAL-2025-181569 Malicious code in tea_gunt99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5b81db11f1bd88d9e39837c890e06e842a6ab3787cffee97034cf09d6f97789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-191841 Malicious code in python-rootpath (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bb867560d676e7b79ce110b230906a9630feb223cbcb6072bff5a2636c60a3c7 Hidden code downloads, saves and import a remote script. The package itself is a clone of a legitimate "rootpath". At the time of analysis, the remote script d...

Malicious code in lookingan-jeje32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a022bbdbf92b5c04895c8ab58fb2955234934c4a53528fd0e54bd07c793d4c08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-zevur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c1c9ad8079bfa69b4d6866fb76b12663acf9bd2bd9a6086e6a9374fe8428afd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nanakila14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb29d24b3e99052016f17c87ed5dd3b4c62a231ed0a66ac047f9ac791aee5e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anais-papmoa-yamaioang (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23ec3a2fc4474443b48b2603f20477703855e7fd32bd1d8231e32512f683c14e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nanakila78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63e2e11f2182bb28d4fa5d5bc860a1616154471b811030ded8de904bfad5419e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-iwetob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 212a48f0ba0d1f4699ebdb517f45ef598f35e9987232b890a702802c931873bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-ziceg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29b6bf3c9ed8c2951b165e97e89a5c0cf95a153b83504e67965e4fa8b5d3af47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-viom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52f542f144012d40c01cf10d57bedbd159dc656db36f97cd8a83f041ea369574 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-py-wenu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a84d3f4ec2c0ba91965fa13abfa4b8e85307ed0d9b13d02f3c3a4ec7ab0fcc46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-jada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cce993caeef57846e921d0499321d07fe93d1362dcc841ae5a6b442b5339a76c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-kijta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8806f3dd784daae2ad244e346ff386bba7201e86a66da781ed87c3666d5c2a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-gosbew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5963b97ef92da3a6b673cef2199879efeed38b8f0543b72a92f79e32d65a843 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-pavuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80104420e1b50df5260c9e6679f566c1014b2aeed8b1aaff295a96ab4b8b5e9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-kohcaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cebfebf0b77f28733802b9b480f3f05df7c4d5763fc76f4e9c735185a1c0b516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-jeje38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1caf077e4fc1b25e630496f35c2862cf446112df9a4f11f99660d909578614e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-ifpoh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa6d7558a5a5e959cb72c519623ac5e7672499b2accebc7e7d594cf21e9b4125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nanakila65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f719ab2f2b0940eaa222f9537f73ec49f1a98abf108c250e0f12499e618cef8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anabuy-innu-nini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98c938ae0c5964f2037d31f0a873ed3fe3993da2e09f2ab105158696b0df715f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...