MAL-2025-184741 Malicious code in one-kat-fidlav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bec38a12f2243e7e966a88a318c5bb2e2e48563cccfe5109fe8eefffcc14108d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183551 Malicious code in lomi-fuis-fangiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d378327361be19f66459d3b835e3754921c128e643a95ac70522383204ad593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182156 Malicious code in gociay-uinga-ugugfgaucfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b16a48397ba402b51d239b43c9b80e4515e06b4e05c39e2da2672e02d31e02d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181853 Malicious code in avangs-olium-anmni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06042ae5e81ce13c70f8bc807167a49fd6379ec2388d5b8e64ccf980867192b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184938 Malicious code in sonic-kas-ahagafujiafdha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6d8ee48a398fea1b6f10abc4d9cf2793c8de58e83a9f6f2a137aa3efdc1bada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184937 Malicious code in sonic-kas-ahagafuji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb21f89fa5d9de34dd481ce083356a5718406984696261589c4b540e82ac2615 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183138 Malicious code in item-atim-kubuskiuabika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5dbf06c3c308f9b1f58f5a8ac6d7f97e5692e3c3b93e0102340f957d801486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cc55eb5e156cee9cfbf89d2bc3f479e45bc198b052b5286950f1b9fd40d68ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b24d9c1fb43b93059d24ad0598bc636e7b55ca4614303cd93a78edb37f0da9c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gun9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cf7390d614ae3abed79bb62e34e694023ab8cd3c4ff71f6cd442b5018011610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d4b0a1b5b7fd0152f065d078d7a699cad4e858c8dcfaba5bb42eda600fe4e7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45938a824eccf18bc53e40458e9f7b6357818bc877f38e067b236b4c9f350fe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae1fe8e48acc441891d9359dbf5e4d834ee6f917cd01a62b99be4ec4c825001 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22986fe25d0992630dca0c0db346a7701b358e6c09362efb6f4123275849d93f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gntc_94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43b361b241a353cce33e3df6a9c52d2054202e85937c822b65f8b096a8f4e4db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d2629b933c76aef884e1a71e636e6e7e7a2037a0f8683cafaba6a987583b8bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 072fd922e4d4dd49f3d66f95ae3c726918d2c4060dfed6195861579ef715a4eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/baong (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f507cbe1f75eabcfc98837682a818c498aeff00607d48da31f73d3d56f3f799b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fd5f2b5f0ed84ce72e37c976c0d9b0dfbedc5f64ed6890b498e203fd75474e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a46d594f19f1f15acbaf19198e316745ddb1a0f18b65ca0dd920c8b7537a1def This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...