MAL-2025-182709 Malicious code in inda-fodja-guofagogiapa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76a94a4b6168dc14f6c8664e8dc18121c46739da8e227c75e9fcfb13e340e997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183365 Malicious code in lobac-ub-afdmafdacu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e3f4f07b1f6df276269c25fcc306c1535f1111b98da5448ee86656c357deade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184055 Malicious code in mitokoik-oni-oladinps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 473caeaf2f72c4edd7b1a28416ad2a5628ca109929a1bb920e0db7263bd162ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184885 Malicious code in sonic-ijos-afah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74fffe55b01a61bd9c33fabebaf37d622b6437b3f2020f1f447b4900caf6b3d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58f37d7acd9c51030713ab601cd0a9b42c4a1988c3b8760988c8975be05db29a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7045c4ca06bdc66b34a35c5a473441a89c23eeed5e97dbc6fed5ed20786de3ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efc4d25e46554f51833bbd0528d4923b060c5a48855ba01c3641d2f02c320716 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aa45c4180397f5e65399ef84219dae3187eba327a72f64300987a591a280ac7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d4b0a1b5b7fd0152f065d078d7a699cad4e858c8dcfaba5bb42eda600fe4e7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/baong (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f507cbe1f75eabcfc98837682a818c498aeff00607d48da31f73d3d56f3f799b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b93459be333114b10914381543e8339fef21f93982504492e991af410209b4f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/teagunup99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 600f602f58637605605e0442bd30114d39bba1a421144db96ecdfee03061e889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kopi2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 244f0211d1c0171e18335597cb2db6e3620737d134d9c4588c27a77343d4f645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 039ef11a13efbc33e5f5fb9dc1f9ca288598ead02e26ee795bdc28d6c7e5e5fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gun6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 391a300a0704dc5a338d5a2acc57bfbb3910153b95cc00161c836faeee07d4f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae1fe8e48acc441891d9359dbf5e4d834ee6f917cd01a62b99be4ec4c825001 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf59e5b808b0358ac24f3b067217b9d9c11b610639413d35049141b0ee976e86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181461 Malicious code in cewe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e5a7cb3ff5d6fc75f10de7ce0602e4c8caac234555e644707c6c3872186b8eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da171d57526a228a3d43108b35fabfc5678236ef882064ba1994856b99be99fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61da6f7ac2cc31c818c1789be09f08acda2f315a0bd2d0679302512c22f61d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...