MAL-2025-180274 Malicious code in teate-thy-sonic-daefu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fab40a1d04aa1bcf724e8aa2784ec14f8299ce548bee746294468bee30a74ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181106 Malicious code in teate-thy-sonic-wotko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7347c4da8d600aaeaaf726545402a853519b9082a67b3a72eb81d8f34f1f059 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180018 Malicious code in lookingan-nanakila89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d040d6a481d83959dfefd55c638d0ccd8a2ffb74463375fcf616caee5b2fc94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179984 Malicious code in lookingan-nanakila58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 764371111308aee8689d8dfa7e3ffd32add5a8beadf6310f54d4c1d011606617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179956 Malicious code in lookingan-nanakila32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dd0082c4ebb434af389c768e69b773c9b4617bae87f613f42371fe080992efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugabi-ivacvafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969b9b80f56330a6feeb6ba66b6bd7a79afb7d04e84e75ea336396a51786a306 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fsbina-infa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21658bf5f2eaa42fbd83ea245308cf4d906bbadd810038cbf66d8c7e125657be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kaguya17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7124c5c263a42f3f7c4913236346fd04d792751ff84cf4598030dd820b0e9d93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvnvi-bonvu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0966d47c80759182b867f75475116ccf0d9bf4a0fb3c0867966c43e6f298e25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuramagi-sutaf-dauagufuida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a76cb9865e019f3c4327b25c651df1714de1a0b3a09519ab21ac70deffaace This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afavhof-rafvzfgbo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f3e7e06241a3de76f9c9e338d05e8f227906494648b20acb47eff49b2fd2a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ef0f20a636fd82ae62e074afe403d2d0a4660a2aa655f21628b40f0cda95e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-gmag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 428bf6f2fc8274bfa824f02176a62b270d9378d9c95cea606fcd8ecb06c3d28d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in savion-goodmn-max (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 797fcc13318e5b4aa370b9f23fcb53f13e4db299ad64e630f99f82d4e074ae67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-vmiam-bunma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ab3725feb5e99abe1ad634a2b5635ab77fdd27b306425ae50c924ab8dec6eeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hakim-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d33966d625ae20fabba972f38805f3adfc6c9f4191b3e178d60f019c7e010142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asafi-davihu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cb9917e8084091810598b5b9971f6152a9d226d2f18a76ff6a5a479dcf88f47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45ded768fa9ae469543c84b006464268c5177ff339fa55718b8be94ec674ee60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avmim-rucsivosav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0e941a052393ad3f0a143def4a8af945e2dd4819b25c148d3e14234aa3e64e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ffcd770b59aa0ff68b5235337d3724c4ddb2a831ce0ec8636af796be99b582c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...