MAL-2025-182454 Malicious code in imodiov-kufni-co (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f4b68274db53f56380fde73727526099d526f767f02cff775409e6f3a78964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184435 Malicious code in modiov-kin-afbauc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2196265320c3dbda5e7d57cd910345766d9b11d01829090b882429b85622278e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183569 Malicious code in lomi-fuis-fsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14f9d28d081c6c3358e4bdfb9ca5e98d13712ed4573fb2f4489d3c4e3416d769 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183479 Malicious code in lobac-ubib-gafiufuufaub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78ae314450c78c7b92ac78309c5d4390a8a86b932017a0a0b1c64b9ec7250337 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185163 Malicious code in sonic-kuoig-timesexa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1defef4ff8e5a745d48d7ece087d36ad1f21dbe727e8b3dfc8b264c2af40e61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faee3a78333ed73c52d7333f38f7e4d5685d9f5759811b7290d82465f9961dde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eac7a71310e665ef029bfd84a557b19d22dd2a05ffc4f9b0c55add351ed33988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0ceeba3197d0587ff8baf6270a00bd489eda27c6119c10d5a8ac3d00932148 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/jorelat3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2116bcc295cdb36b79c0dc1152a23c10dfe80389ba0b840ef99b00f067aa0a27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ef5eafece7b262363112e158ba153779abe5d85d7cdd99a93b168b6dd978e58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5a6a3ae4a8c03f7610c265d98a4b5a49ca31e64c532a3e0880ad017611820b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0e10175d639562bb303a4b140cfcf11dd6657ee0442c1665bc728c1a57a03e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geulis94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae36761dad348bfc6af5a72f56762969382db878c053676dc81c54d549f8df2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 356e8112859049cb5a85dd3032485f2343078e48b24ece76a942837b778aeeb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43fdeacca2af93853b7f809684a7a8c8d00f9d05a035a3fd3e00094fe949c4cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/kopi8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33df09c5bcf7eece7b9b2e3dcabfb5cc51bca8556d0474858d0802360f3136fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e925b928e8cc2ebabbc5316670e9ee5efaf8b82a10e719b6ef8c7f389ef7791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 039ef11a13efbc33e5f5fb9dc1f9ca288598ead02e26ee795bdc28d6c7e5e5fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181337 Malicious code in @akunsansan0/susu2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1f50e585eb20d203a5ec2989c33c26a3e3d838248cb79247c1725ab411df5cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181232 Malicious code in @akunsansan0/biru44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d92d19c44e81111ff4a3d1c81d0965588dd8161fccc5407ffec667c42ad7473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...