MAL-2025-182404 Malicious code in imodiov-kufni-aceqaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae98d5433a1039e31727cdac836f971511e95a6a4e6f90400b04606b6c7ee1a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183403 Malicious code in lobac-ubb-afayorganu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d28c3468d07e9cabf90c5c3b7dc2f30f41f4f0ad1311c0e4fbea4698dec1181 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofki-afahiukuaagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01e83920cc7e9fcf4801a92588e5491c7f5b6d8a94b80a9b33a4c0443ca6c878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182207 Malicious code in gociy-ng-gufaguagufaaci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19346ce0e663920d4dece08b4042afb9911d08ead1bd873de557be1227e8c7f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183469 Malicious code in lobac-ubg-afde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69632ec517bbc21680ab1bab6258aaa3f6ec0ff319071dacd3613c9c37700431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5a6a3ae4a8c03f7610c265d98a4b5a49ca31e64c532a3e0880ad017611820b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e925b928e8cc2ebabbc5316670e9ee5efaf8b82a10e719b6ef8c7f389ef7791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/kopi8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33df09c5bcf7eece7b9b2e3dcabfb5cc51bca8556d0474858d0802360f3136fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 356e8112859049cb5a85dd3032485f2343078e48b24ece76a942837b778aeeb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0ceeba3197d0587ff8baf6270a00bd489eda27c6119c10d5a8ac3d00932148 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eac7a71310e665ef029bfd84a557b19d22dd2a05ffc4f9b0c55add351ed33988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faee3a78333ed73c52d7333f38f7e4d5685d9f5759811b7290d82465f9961dde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 039ef11a13efbc33e5f5fb9dc1f9ca288598ead02e26ee795bdc28d6c7e5e5fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/jorelat3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2116bcc295cdb36b79c0dc1152a23c10dfe80389ba0b840ef99b00f067aa0a27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0e10175d639562bb303a4b140cfcf11dd6657ee0442c1665bc728c1a57a03e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ef5eafece7b262363112e158ba153779abe5d85d7cdd99a93b168b6dd978e58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geulis94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae36761dad348bfc6af5a72f56762969382db878c053676dc81c54d549f8df2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181533 Malicious code in roti26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 040aed06c7769209611781b3980b6d7571d5a4fa429a0810e1f2549a034bf140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43fdeacca2af93853b7f809684a7a8c8d00f9d05a035a3fd3e00094fe949c4cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181514 Malicious code in pucukharum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b7d1b06b0c469a6a09dee64d915dc0425c87cb75418ec5192d9f1395e686b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...