MAL-2025-180645 Malicious code in teate-thy-sonic-licow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 747fa13488b40cb72d789de4ed8288e59deab5f221a213a932e4df4672a667b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180416 Malicious code in teate-thy-sonic-gehcog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f5dc880b46a7fa358dbfe5598c37ae39986ee20777f8ecb99a6aa0ea0a284a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179949 Malicious code in lookingan-nanakila18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2c7b3fe52f1a4db46cf0b648e9a9437256638006aa486c3f7b48c5f1c5d7f6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-jaja23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 672c73e386f312ad8e802777d21e72ce4f9d8ee14894de0a95188cf458908d13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180940 Malicious code in teate-thy-sonic-sulu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4799d4715858a1dbcbbc07b51e38d6d7b568bb4d2fd71e06bb700c77348f74d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-baf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0c22f64ded383065623310d4f3e4d02c36e2e5479f7b3c6f2c5684b9c36cbae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymera-anasrai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c9ce1c31490f00591b91ed6c8f95c1f31ba417cc45ffb1157baefd5edd187bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avim-ravafavu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e12b830dabd20215697867de347eeae94dd53897e4f2a1425fdf22271dfa311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fna-igaighfnaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69c931b7a1fcd8bd5146a6ed43a95898b98822c578ab8671a78c015e0ec7b357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fasg-fnda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82bab65bc0a322680f7dcc4603824e18d186751ac193a7abd37300b582727549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-sautuga-infarudi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe39b83c55cecd956983ccbb56cf50174f84e226666554cd233100a7ba37263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tutai-ivabaagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3271ede40bb57fce1e1f7ded9f3f850af35722851dfdb266c386a01aaa7b1c7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banib-imuamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f02ad46413c928031c8294d654b0817a708137727fc354006452594fb74edcc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-vsbers-vtrs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f655000e3fc9c003452a58059b3ab085725703a6fa468dc30ceb2a852a6f895b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banobfo-imuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db3ec98650a4d34dccf0a3f14a0a1fb2e77726c53c1514d582468e9073600a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufar-satiaf-fav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6128f4ef14c00e90c7ecb88b8436ad988190127dc93e6fae3c1f5b7356529b00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banifbo-imibai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f0b062a53221735998cbeadf4e42f8c38d39c2b728cc1e5de8225462f71b760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thudsdmbi-test-uytd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 713ca6b1da1605cdeb1a62b7692308a60c05c7f86c2bf700e12fd25255390ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godiva-tumva-dinu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 250b16ace8a933d649e7df2076773886e63f904eb2a0861c0ee37f3d012ca975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fna-ighfnaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c98b72ec3c481b593466772941c07dc5fea6bb3d611cd7478e72edcacd19b224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...