MAL-2025-183541 Malicious code in lomi-fis-fakugiukatajb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14bd06c4c4e4c61766e632aaf5651d08dc0ae0427f99d3ad1179c28245566aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182968 Malicious code in itale-dci-fngdueyfge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab232bb35bb5864cb4ee1e885806c9d56bc199e4f2eff38783887b7fbb40d6f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182754 Malicious code in inda-foji-gisu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9b25ab5ac2e5c570bef15f135a6f42c0b04b4fc0c943e124e1478bda4350dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184741 Malicious code in one-kat-fidlav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bec38a12f2243e7e966a88a318c5bb2e2e48563cccfe5109fe8eefffcc14108d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183178 Malicious code in kidt-aog-uvuffaaifaafiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1e452280187cc62de1d5dab0d99faf0edd14a63cd13a8624a59a5f830d4abe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181808 Malicious code in avangs-olimois-nolianu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6201f93fec0b8441f49dd599914c281782bb8ed08111847f6cda7124eeaf31de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184356 Malicious code in modiov-kihan-afibanaivuvaaihid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83a0ad08f3460cef612c7463e267ede3fc39fb052f5223a405ec440493617d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/defenmiftaikyy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90110b4cfb6a11264ab8502500cb0a8df72c198c3dcf962e32022aa0655ecc4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/batu7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e5874018da3c1e6a1c151fb11de74ec1b0ee45baafb0576980d9fcdf79f0215 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbb6be5c277931ec5aabf82e08ffb553f53d4932cf28bbaad44e874c01eaa5c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c0e585a6d76b1c0889e4e1033a82364482527aeb29d6ebc314d408ef48854b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/batu10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95735ba281be9109b65e7d891d9bccaa0007232e885615e49f9ae103d49bd0ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a15d0e68f2a30282c214e6e938249cbd3ad13b50a337968128aa5a3774401b63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7045c4ca06bdc66b34a35c5a473441a89c23eeed5e97dbc6fed5ed20786de3ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 047731eff0d2f7ba46ae40a2ad3750e63f4f0ecad409b8dff97b234e8e9ac005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01b757c718aa3b0dbef2035c79a7239c242bcced07415b7033dd523c7452d9fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 401ca59622c5fba1b53edbd802f13fe03318c4a80792d0b404c385378cea1310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a46d594f19f1f15acbaf19198e316745ddb1a0f18b65ca0dd920c8b7537a1def This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/jorelat10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c674a5e134eb7a7427a04bc92491c77147363ccc1d6f680256a279a924ae3844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcab899be034032f904d16ba7959e075f6c8239a39ce1ea85004fbe63d94877a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...