MAL-2025-180231 Malicious code in teate-thy-sonic-camotu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f4e1fd5297edc960a496ba87d4c0c8edad59394ec6c7fa3d62868814e2d186d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179460 Malicious code in aiboloa-mionispe-amio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd3d5791fa9d9bc33291ef7aaea8595a20a78e8e3623cfbdc33455006434226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaism-lmior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 065f51172e3cc54a8eb0b6c79362aa0b0adc90ede1a03e0d1c9ad23642781c76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avonnf-absoafia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d4d1e5cc4a3e2a65b5ff01138450eed3e2c971a73b8a4ea25269bf7c7d74979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kil-kokaialiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97861d577f11fd6c478ce919ccd412caf0f9118c86b51bb19a14826c58fbb8a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ee4d711a3e262c89ef278e88768444a1a33165c895b2269224bdbc4d45c9305 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognmh-afai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc9471edc28d52c15f0ec9003fd2d6c49522f3ee445c66b644b7cdba7be0856b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ukutoila-joiluna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9d928461b6d1b07fa093dd2e8bc7acd69904c64d7aa4c1574110fe5f3df79c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-troe-dfs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3d008428743510d77441f0146574ee971839126f2433218504f515368fc9976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogihh-ffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f0c37710206109c5b6c2cd40e3fef0615ae168e3f9dad4afa3f376bd7f3742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofgdi-uafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fef22b07097115582bd4987f6c22757c415d83519fffadb03bf485b386622aee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in risky-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d861d4403b36240af62797b68bdabde0dccf7992c9ffb76919edff93f66d31d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erftads-ertg-trufd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 185598f171c8cf28d8ff98da49bb81a424fbdb311cd2bcb15e894de6c18622c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godiun-tufja-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4b00c841a844abe148415aab470adc61ef5b8df5e89b167f8871933cb265f5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mibasah-nuyag-msidnsas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 245c795c5b94f29012c3c42e8846bba988b04d64af94e7b76df0b0e47e6fc7e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banbfo-imunasgsbgsai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61b439c48e7422c2f2e2fe4f0af313e931526cd9f9f929c93c99b81c023c2694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuhhh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 297b055cf4800510d8efcfbcb4d357c3c57efc3a2a2c67a41da87802c177d964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiya-suayu-ganoao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75efb949d8bf5f037d9a12178dcf80fe5f12f7aa07d1253a18b42b28fb8f45b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banubo-imani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cad999f66e7c49a76732ec586a0c25b645ea73f1e8d5b751a66025aa72dec7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbona-gdoda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 376116334a2b441b714046cfb08b51392c74f53fe45225a32b91f35966bf5d35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...