MAL-2025-184083 Malicious code in mlokok-lfki-afhgbgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efb1a46200b336a772c7a7589454e20c421fc2b2dec880fbf1c082e07e5161aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182785 Malicious code in indea-fotdio-agov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a038ef5280f1baab03b009747ac2decea57881d7b7bbb08f6253ca3c666bd0e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184628 Malicious code in odasv-knu-bonijavfcacvf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f92e3274e0253c8a04729533f498b5d67c4c7d9fb340a23fe69788e9421c48fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185081 Malicious code in sonic-ks-ahagafujihuajdha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08fac6d2626a4c134e760aaae1c7023e5b34fdd4ea59f0be010d6eec05ea22fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183722 Malicious code in manu-oib-givas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d941d5a9444f3db2109822709e885508bc0ab5ec8c2d636749a4fa314cb3371d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-nofy-gtaoayigaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e95e82c3c8c51d208dc73b7a372d3ed5059a1a46c89435b1ad654f27beb51d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitk-oni-oladaps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ade73197546d5756c590c38ee99756a1e95b0dca3f2acb28dda4f60885c02d34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olioms-nolifgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30cf979deab9823bfbd2e5c5ace07c0c5db904391ef4fa49317850bec819dd18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuloig-timesexa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db077e576cc5a1c50f30760215ab499661a486c023148c3f31644c7797596f6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ks-ahagafujha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 388f00ddbe21e1f2fab54d667f3f1de6059655a31a4c380d667e03f87c7d7f75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-ogoia-inulubami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4384d94567591c6f34d5bcca003e21228282eab22b6ee558170b144bcfe29d0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6244765a5a319ae7e70f11b427403e01a63b879571d982e29e85895bb82753df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baab15766e116687af36b69a4da587b3a3db3aa44736b4f3b3753755fedb1ec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181265 Malicious code in @akunsansan0/jorelat17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c526d9abc6bb41afc0de953d486bf534b093e5ac3fc75602830e6fee0c164254 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7045c4ca06bdc66b34a35c5a473441a89c23eeed5e97dbc6fed5ed20786de3ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gun4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0db6b1894f11e02e31527d78c413e380259f9998cad88a91c34bb0dea04c303b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181334 Malicious code in @akunsansan0/roti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86cddf23fb1c7fa648878023f9592c2a1c2e2dea3de9a61fca86cb9d2ad993ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181513 Malicious code in pucuk5000 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddbf67abe3288052feba873b55b882342b86522cb67b04eee421f5a72f159901 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181242 Malicious code in @akunsansan0/biru53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f47a56a11892bfd7d72329ec628a9c9ca5e164a0ea32bef21bc956898ba0d26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18dc9e0ca7d567e7f78d9df954cb109cb848d6853f5ef2bffd104de9e0e30c01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...