MAL-2025-181731 Malicious code in astam-ifut-duoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 696e404c1daf42ca7ea9195cf0636ecd76c5da3043dabba1fc7558e1e4965a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuausgbl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ec0feed490438c033026ad8c258e21bd71743e144a9ca96f7bf4b2ba866cfd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182159 Malicious code in gociay-uinga-uugaucfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eefda5b5e3085109b39b341e1c479fa58c4b6a0920e488bfa15694b822e00074 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183600 Malicious code in lomi-ifus-ugofalifuafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ba7da030fa77f34e8154b5f80a83d2de0039b8c016e53a7a8ac83708f084dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/pucuk4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae949402a05d92885cf560346a568bd79bd6dd238425ec5a1dc197fbbeb6e03b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181503 Malicious code in gun9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cf7390d614ae3abed79bb62e34e694023ab8cd3c4ff71f6cd442b5018011610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-pipmag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad6aca38599ffcf2f329af2f3f7fb782e8b014cf3466c2f5f622139afb2390a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-py-limoh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c2ab8296d3af42cd4020f54c9daeabc1da0f157f802019824ed48b51e8ece1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-faifg-avu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa8f6eae5f4c83e21009462188d83d0747bbcb92312ea6955df7e576c75747f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180545 Malicious code in teate-thy-sonic-javi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c9815cade8de3000dd8136bc21fb9da8c86c9494d15b4785b134b5f82dffa60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180809 Malicious code in teate-thy-sonic-oslan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c9de08a4f5abda3987e9c9bbdcdd7c4bbb2c7f908431aebcc719a9f41a1973f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180968 Malicious code in teate-thy-sonic-tinsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0a1ce0eec33546aac23580b1122b279ab0e0e43ba269fbf58baa8ff92008038 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-vite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f9bd7535c1fedd0789cba27a3937d313903eb6644b0b352a673574ab3183a29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-dodec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 648e88313aa443d876f0b246b884a1d4c996da2bc430446af3f18ef9fc79a286 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-kijuc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8fa190069ecf194faff487d2b9356bada698aef3920a83f8ebb27d30fba9438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-bumaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74aee52b1e5ba6cc1035904f38388a479d909e4948af625819e24ce0ad6132f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksaki-kaisoim-olosdsdsdgggnika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 067de673c58e47f7d111be7d02707b487948fa1ede58775b40f630705908a11a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rintono-poke82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c754ab8d531857b665b1a30df29ed1fbcdbfc46ad500d8a646f32b9efee56e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-fafskfskfsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecf941c78e3cf87c4d7524724aba5abdb1443735b38ad5e12ac3daa8d1ce25ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimuna-safiagiaf-cuagaifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50752fdf75633e866f0e7f2c2381f0b8b45b738d9fcb622ddaf98fd2689d8c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...