MAL-2025-182943 Malicious code in itale-adci-ykag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd9cbd18687dd4cc679686e7f9ce61ac31f672738dffffb263f0579ad73b98df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184116 Malicious code in mlokok-lofeaki-akiagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0d053fb03abf4a1d8c319d69e1a173f44f62085cec8272bb8e2c1d94870b6ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182893 Malicious code in itale-adci-gnuygugjkujnri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98be6827f8ff60d32afc362b8f26b005fa1b95f3f8a5f58256a7ee82dab32355 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/susu7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f8599f5c11b2d5de4d4126333fdf8b7fd7975be78143ea464502273a0a276f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/pucuk7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7110fda85f6f6cb0da43d4672be16d01be8f9139ee302407a03017ef030035e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181459 Malicious code in baso98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03482c981ab225dbbcbe2ea498e5cb2610599ad6c07726b0a8b20aed1692960b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-coso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4575618cfc63ec13351c2f09e6efe06103dc49c15a19b7fb177a04558dd1cab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-faifg-avufb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc360a04ccf93091269272f1cf896b94264fe7c4926ae9c12a5ffa68b14b8030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180773 Malicious code in teate-thy-sonic-obrom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d68a614ad015f79189a55ce1432a18a898d3ad227fbafcccba3e976d899be875 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-jaja58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f77ddfc78b2d8811a1e18393582e6bf07f0eb9e7fff56c885d9577a53ce607b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-jijrud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cc041c5ac131e9710428a7cb2262027b210c8dc3631e42f51714f3bb2c63c4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180048 Malicious code in teate-thy-py-dasak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12b319e01f402871100993159ac5760b2ea48df2dde6182b47cd4016fb9f0fe6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anabuyi-inubuava-ninni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e877d1246e31eaf8ca8cd97f27b2c4e86f91cdd632219f8ac5083e0e937f078a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180311 Malicious code in teate-thy-sonic-dujcif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 002d5d6292ac5cbe7c3874823e634ec4cc17a95f207bc93f1b690be117e26f1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180157 Malicious code in teate-thy-sonic-alojer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10fd844e1056961a7136d7d4f49ebe74d756febbb94ac684e57685e38968aa87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautug-iafaggf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e1653a485c5045b49e3e2085c8a665990eaa5637b48b175f3c2f68602de7824 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-fajmaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5237effb860b045f300b93e87fcb3b28f46eb47e2a7152a0e94ba095e05322a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haruni-poke102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc6861bd68c581810e950459e24ae3d7f33e13606cc523c434535d1c89fad2fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-datdfadsid-fdr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0dd403a83e439d002a2df7166984a7160d0f55e1d79e6ab588234416e988689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaka-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4f67eafc609b3dedeab573ea7f2d28e457e81b3874f30fe0d889b6ba80c8b9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...