MAL-2025-181068 Malicious code in teate-thy-sonic-wagwa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55a1ce92c9d1651574d0b549a7fe6002739306a9f0756d0b6a21093ea58fea27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179980 Malicious code in lookingan-nanakila54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d624c6171059a576a549f2aeb30d57ff299c477bab7a3e9ebd94a90b0803a06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akkke-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 103739e5c087af5207b3df544bc1f31c6c5e75a78eb20aca45187ea0184bc4b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 271bcf5d1877463d1e6b8202565382628244726b2d6178be485f8cd74e298d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-manuat-ma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31eded59ea6b6bd82960c1d29d663ccdd320e60d4379361bca391cd7cb0b3d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-konto-rusmaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd720c02e8d7640bacea792386e6424b79dc54f1bd362160e50a2691e8313a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butahu-asfui-duigufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62add8d0fec1d2949c18ce3326f7030cc2af826433ca6024e6341b89ec0d517e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-yust-erts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3310d7e248eed16a2e63a3705f9cc2a585a888acd57c6d4bae6a8190a90fc2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banbfo-imunasgsbgsai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61b439c48e7422c2f2e2fe4f0af313e931526cd9f9f929c93c99b81c023c2694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banubo-imani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cad999f66e7c49a76732ec586a0c25b645ea73f1e8d5b751a66025aa72dec7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erftads-ertg-trufd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 185598f171c8cf28d8ff98da49bb81a424fbdb311cd2bcb15e894de6c18622c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-ngafsa-nubif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf6b2d59dc159c5774478de9c6324e8b864a41f4e658cacc8e76daf9b18d273 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hakim-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e4fa7b5381f375a02224c20ccec9e6df48fbc8315547e09f03d6fc66014f559 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 163b1402ed820f9188d8e78c7eb2e86a2e5f3bff9df8e3a7c8bbf41a554e9a64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kim-ji-bau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9507c6b14d7900f8a3f91482b117a4dba48d5bfc34fb06e0a1039f02a33795ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kim-jiwo-bau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e106750cadd8d8765e5149455f60c40215d8d9af73471f3eaf1d085b3d5945b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kil-kokaialiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97861d577f11fd6c478ce919ccd412caf0f9118c86b51bb19a14826c58fbb8a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kiloa-koalaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9b48df98444b991622a55f65719401b304887daa5d099c2a5e06d1154ba76a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ukutoila-joiluna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9d928461b6d1b07fa093dd2e8bc7acd69904c64d7aa4c1574110fe5f3df79c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiya-suayu-ganoao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75efb949d8bf5f037d9a12178dcf80fe5f12f7aa07d1253a18b42b28fb8f45b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...