MAL-2025-183125 Malicious code in item-atim-kubusaka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 430dd2043c196cf9b9c5e667c1b432fee5f1a68ff90fc2fdce9b8b030b633e40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @oppo25/depentehtea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 209c89b2d6e7653b79cef266c433ea07b9ef949901816d639ec9eaf4f3bb245a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fd5f2b5f0ed84ce72e37c976c0d9b0dfbedc5f64ed6890b498e203fd75474e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e925b928e8cc2ebabbc5316670e9ee5efaf8b82a10e719b6ef8c7f389ef7791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30432758b1d484b88d8d61f8109e9450f98d8755a6bbaff4b3d4ddafa9bc52ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50d3a6ca4a868b02dd93fc667dfdf29195356ff861cdd7370b7a4a2dfd4a103d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aya2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84aa47ea39c8f0fcb038a758e19b324df522d4a5c4a70cb1f7d0731e32561a1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gun1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e39996ab245b744a18cc86ef786e37d389e5830144e272e9af07c90f6871a0ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61da6f7ac2cc31c818c1789be09f08acda2f315a0bd2d0679302512c22f61d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181481 Malicious code in cewe27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 072fd922e4d4dd49f3d66f95ae3c726918d2c4060dfed6195861579ef715a4eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181512 Malicious code in kopi2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 244f0211d1c0171e18335597cb2db6e3620737d134d9c4588c27a77343d4f645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181385 Malicious code in baso29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5a6a3ae4a8c03f7610c265d98a4b5a49ca31e64c532a3e0880ad017611820b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181493 Malicious code in geulis94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae36761dad348bfc6af5a72f56762969382db878c053676dc81c54d549f8df2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baca8e299579daf5443fd9ec60fdc3a01419cbd261502556ea3f131f242edfbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bba039ba827212c63c10613bd28ee276bc305fee8c00efeca20ae84bd4e11c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181468 Malicious code in cewe15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 754386d1ec218acd5a10fa7f9e00cc8099ca5127ca3d3dfa0829694ef1b6b9c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181215 Malicious code in @akunsansan0/biru29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43fdeacca2af93853b7f809684a7a8c8d00f9d05a035a3fd3e00094fe949c4cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08531dd6386f4b370db1bfa2bbb50da4539c83cb1d4d2686b7a729bbc4109195 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/jorelat7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05424ec1bfcc8371e06aeb3f04dc8ef69d7190a0341de389f28243d16463a6a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaguntur99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51fc097a34987ba2d92daddc67d1026757bea8d1028dbf629d10cd127588b43a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...