MAL-2025-180669 Malicious code in teate-thy-sonic-lulre (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf295c1d260548dca89d9cf60192601a974fb59ea82db3264bd8a5a4e1e50d9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179811 Malicious code in lookingan-jaja34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad36dded83e306cf92a68d0a5debca85a8f1b304eb91ef46ad00c22372af8ef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181106 Malicious code in teate-thy-sonic-wotko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7347c4da8d600aaeaaf726545402a853519b9082a67b3a72eb81d8f34f1f059 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditi-tufabmu-itubat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19b5b5628a623d2413dc8fc0a824e43f81a9f8b801488ccc83e5e23aa91d493d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koko-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 052504e6dbb255bed00da650bb14612ca713af07982cf6c7c3e25db6a3a74976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahuar-satidaf-fagubaiago (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb99ceae30e6f97fec6f8fb0a7111c4fcc1a08ee3e35126dfcee2b7350a658a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avoafifa-fagiagga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 425051ab60f3cbfc25c9cf3675a8f100c3a88f8b140d538c1eb029b0c5471665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-gbbssoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f3702893b3d7d3787dd02a08293f7ef5df747ae8d9c1c20bea851e3f4c059a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimi-sathu-angifafafiug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94aa0ced1b892ee55a491ddf9d97a4f1db1331eba3f3067181423e73a7d53814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avof-aggifiafadfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ec4e16166ecd7df7904630b2afda1444209ed78ffcdc8f9b0898ea47c6d237f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanufahuir-sofai-duguf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ead9cde4650dca24b2729ff5cadd2a1cf227e5d71c8e987c791e49f0b0b94b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-bafagig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b26b987d38b7c9f50c43d7b700e8b62e5ff9a3eb327c9531db0a5a699c1cca71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dare-ooadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bedae645f003f9a55f8a1c83dd94e3f3f5d6c7a51c5bb214277b640b16089d56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ten-teh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52f4cb58fac5cdc657b07ea20dd13edd22f01143cd324632fafae9a893d49072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbbna-giodaiaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15c8291803901682f772ecd3b2cf1addf84dbe0d2d32e83c6a245d7008f45e79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahniya-suayu-ganoao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dda76c79684de1de9f66961deaa28fccd1b1df3e15624fc50017c768ac64490b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-audar-baya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8d772a7feca4318dd60e7dff76eb71e92f4e99db642d26c8d5e8612f23c845e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodain-sanu-nu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fddb7284d512709633b5e0d0b4dcd48dc066dc0e4fe3359697aa656ce59208b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimi-satu-aniunifaag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6f6617ec58ba85f90448af6ca48376443852c3187233d3f5a4336f0ecb4026c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfia-darfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d457d03867068ebb7a13a315c7ca92ee7c877c3d02eecb751f98f602fb699ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...