MAL-2025-183013 Malicious code in itale-dci-rrst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 516a72550ff613866477a159c686c13b980f4f2cbead71f34628c5052eb82419 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183986 Malicious code in mitok-doni-olialobaoina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28b1fab2824f2b7fbe2f966ee95ed701b1efa1ef6445233fece5dbd671c2fa75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-afisigafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f9138d2047268c93caa4fa30b9c227bbd22a3c7553c9d524e5b20ae4d605d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185045 Malicious code in sonic-kots-fudvitifagyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be0c89549f18c7196e8a17b69fbe5a952bb6def7e4ba58510ff5fcca315ef8c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182724 Malicious code in inda-fodji-go (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0de03849a00b4a6ebad687dce014d1eabede6a30a4f4377eb71c91d71987ca78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181630 Malicious code in astam-ifst-diakavgyag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775e2a802e90865acfa0c3d836e6fe14d033ba3ad3e8c930b4e5fd8baca53a8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-digoksla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9523178dde35ebeaeaa5aaa7ee9e0adb1d8c89b76d8f0e7564d69b4800c0bb40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-ahagafuji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb21f89fa5d9de34dd481ce083356a5718406984696261589c4b540e82ac2615 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faee3a78333ed73c52d7333f38f7e4d5685d9f5759811b7290d82465f9961dde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7772bfae5c3abcf50742049909a8f88ac291a2df709a078ffedffeb7372d5a01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c0e585a6d76b1c0889e4e1033a82364482527aeb29d6ebc314d408ef48854b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26bb9f7b1f905e65b361207481f6bb2a7fe5bd25e336ad2dfca52cd695ec1aa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/susu11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57de18193bedb89bf38dfe9a773230ec1bd426d35fc9642bfa6f7ab5aa3da317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 533c2598bd6b02c742b8fb1deaf46113e3c4406659706617441ed5a4a2462911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ed2a1f9ba89157dc64bc71ad7062eaa94ef9abcf555c71a2a27832cb8de2506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/tea_guntry99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4144e768e757fdc9744bf69bc148be2c44a8558be6034a302004e92192d7d67b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df98b58b8f64bb0638149c243cf6aeaa9dd02d0223b47c57413cddb8dafad08b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9276cc752fdb6f6965db6822461c66a191f307e552f6334917561331b6ecdb15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1414cb1117f85870f3139cf78ae79a2e663dad3903b5200ede9f51c21246aa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/tehpucuk3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a30833e0825c03a1b7e967bfca2ae7cc4d5612d8c86a711808a0c71115aebd56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...