MAL-2025-184013 Malicious code in mitoko-on-lakinuaoabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6587df879b09b3e3d1880af4eadd68bd7a1c79388874957d2939be4166ece9f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183879 Malicious code in masv-ilmo-civasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fe5fadc2eeea482ab68b89e556d556391d531c6dea1cda4eb93f1c0c2fb9c8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182486 Malicious code in imodiov-ofi-cafacevavisvoemolcabyca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 962607cb45586f2764eeea9e30e1d283b9636cf945d3d9cc828b964090b7f75b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184340 Malicious code in modiov-kifni-ufbaceuiax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e3af6a5ced420a2a6b8eeb2b0ae04b32c157c641f3a99b337df5b5c3a170dd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-fusog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c7d6aa337dd2e4044a2de8d74183f09effc98e1e611a0e77d4665a5b3820d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30432758b1d484b88d8d61f8109e9450f98d8755a6bbaff4b3d4ddafa9bc52ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efc4d25e46554f51833bbd0528d4923b060c5a48855ba01c3641d2f02c320716 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/batu9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e85d16f483079e6e5829226e795ee85efc7632b615268c487b431d3adcf6f539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54021b1cb3e86b952d531fdf525a33e1c85374f3c2d53d4eaf5188c64a36cd5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30e5ee2f584db332b8a6fdbc26c70609814e7948171f8a80f340636581ac1b58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/jorelat8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1814dbbe0088cd35f2150d8086c5b3b6ccdda5d24a4ca109377e0bfd69484f70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be2649424bfb044d8386f79e587c5bd59388abe908e4aaff01044bfba9efbf12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/batu2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7950792f3fa68ac5ea0589ac1fce4b10697ff5cc35badc6155403173fb09d918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 229540064d741ec99bf36bbde56e35f3a5648842c384d530ac9514e9a835461b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf434ea23cdf28f8b9c5d3a51351c6734bfc3c6f36e4797d1894e079d0221d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e5c94bd91327f8ea51df74b18c10ecb0240995f7856dbab481e8fb93daa35a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181240 Malicious code in @akunsansan0/biru51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1c07af633e0c3899745560e15fbce5ba8bfcc53abc46bc611bc55bce07cf720 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181209 Malicious code in @akunsansan0/biru23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ba457ad437e8200e6489fcf2e87dc0e4399038c98278c6e9209a27550fc8343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181512 Malicious code in kopi2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 244f0211d1c0171e18335597cb2db6e3620737d134d9c4588c27a77343d4f645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181416 Malicious code in baso58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5096d4b84d33c9e3a0f0196b931ef3ce3c4e70f376d450ba3fc5fe4a327bc52d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...