MAL-2025-183652 Malicious code in mahnu-oy-giosi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d587fd28d3b3791152b117eff77313ee22ec8608e5fdd80f94caaf5f16073a38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182710 Malicious code in inda-fodja-guofgogiapa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc30b3388cfbdc870763c6b0116eb36e65486ea5928f2d7d6332423b48c90060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183478 Malicious code in lobac-ubg-afe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8fee0f43cb1470f3bd1210d847a9bffef9ed3fac3691ed77d4a0e5160e544ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181672 Malicious code in astam-ift-digoksla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9523178dde35ebeaeaa5aaa7ee9e0adb1d8c89b76d8f0e7564d69b4800c0bb40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183263 Malicious code in kisut-diufg-difvoatav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f34ffc8efbc51424dba0b2a66634fe282bd4ee358df8d053c43a014c0e5e0ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be9f2fa2a7b282f4e59c3a3fe7776ae5fed8d90e0a96ede764526f2a42c232cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca0a53a7b53e1bc4f8fe9f02a28ee2e58c29342e39ba3d8d3ee8ac80e4dd69f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0b248d109a862d30e303e63a2d1337cfb1d849a38fed0280c8dc57a8d8245bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/jorelat3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2116bcc295cdb36b79c0dc1152a23c10dfe80389ba0b840ef99b00f067aa0a27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43fdeacca2af93853b7f809684a7a8c8d00f9d05a035a3fd3e00094fe949c4cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geulis94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae36761dad348bfc6af5a72f56762969382db878c053676dc81c54d549f8df2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5a6a3ae4a8c03f7610c265d98a4b5a49ca31e64c532a3e0880ad017611820b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb0fb353ca3a9b3614fe0b742212c12dbbf180c1cea3663f31e5d84566e897dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba26c58d7fdd0a6b0668a3f02b7fa37e0134e7e9395494570b5720e7a3e3ac72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a26f0b320fd3ed877e7d1fb7cded89b6249f8c634e942e361f92fcbd023b37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ca29d8b9f21bafffbf12e2acac9a58caec1495d1f3c058864bb8e24b9b09abf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee85808e8eb865fcefcf83491e1350b67b3aaceca3e162c16242b5da0d85efc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/jorelat9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 460e4db057d88a93ce24f8ec35c7fa731845227b12f4dfa9532d7cecc6b26474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487b82990d8adc92833833ccb356c0454079c232164174fd9a2c133f76db431c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/kopi8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33df09c5bcf7eece7b9b2e3dcabfb5cc51bca8556d0474858d0802360f3136fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...