MAL-2025-182213 Malicious code in gociy-ng-ugafugaafug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cbdc87e17957cb2da6cdfa02455e78867dfcfb2da5d92738465892c560b7e40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184365 Malicious code in modiov-kihan-afmca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89bfed3c26b4fb2af9638426b978a8339a15b12326bddfc55684505c322da3c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185134 Malicious code in sonic-kulig-tgacv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d05eaceeff54a24474b1ac0b324b1cdb70c2444eba0a31af22329648b3af0c87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-avg-di (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c26050ccb933f59fe867e5e813fc242cbb5c4aa1daf54b6ba0f57c1a9483c723 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnyagyyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4d75141209655c4d7f19debd59e89cdadca5ed3f04e6e097666e81243b627d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183014 Malicious code in itale-dci-rrstt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de5827dd3e94fecab4b4c21d6a1c267c22b81ce7df8e5c5199eb87c00ebbc7eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184198 Malicious code in modasiv-kulvu-baiucaufaifuav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad2d085b354a8666bdc1ec38049622e580c50a4eb73f1ddd4cd4191b83ddebc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182737 Malicious code in inda-foji-giaiuasfia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64ea6a2ede519f82e9b0471ca2e2711db9b4285b58f40864fd2d4d8eec77c413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 694c1616f49fd58fb03c27620a8f54fcdc6c492cc843c39b09f5e8d55e2bf482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ee2aed2354e8c374a729dab61a4963bf542848ee62009bbf5aa8f48c49023e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43155d3551d5488ca32e9f99fb437a954d7505266b35d659977d2c1b92a89e42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee6b7651f46986b656741d0f4804751981aebbd24718f11d523b1de51b03eb16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7566b3aadc552a2e2f7b2c3608662f5571c2d20dcfdc0456e147de2f9091a5e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c01a65223eb44d8759a2d8f5521ff1a2a66aa5855286f6c3d47035d4113813d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/susu8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e4fd6ab956a7e38a926140ec93716a068ecd3d6f31b9172fd553c6c7f3ea9a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181407 Malicious code in baso5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c04a9237f85fe2bf4a8b6fcb2ff46969bc4f164bf850137ffe3324ced69f4a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181172 Malicious code in @akunsansan0/batu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1cf888bacb59b261071db98dc593fd125d0fbd167435319ed732690e7843cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181518 Malicious code in roti12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eac7a71310e665ef029bfd84a557b19d22dd2a05ffc4f9b0c55add351ed33988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in susu1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 190e852a34bf80ebb603fc6537f863613c882797d5c020856b9ad0d9c88c93dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guntea99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2668cf46c1aed641950ea5ac9a5c26b132f13438702f7a2b35d4653699f0e46c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...