MAL-2025-184797 Malicious code in poliaoz-aiko-avuku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec1307a7d3963578d8a1168c6c07013c2ee6f6ee8787db247efaf521f5dce9eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181870 Malicious code in avangs-olium-noliu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4b4f3b9e3ceee00446b5c107c09d95da19afd580ecfd4e464e956f7e44ceb19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifush-ugikfobi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1c59755f297706751f06ce305a4d58f1833838102248274ef959b514a3e2f79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182428 Malicious code in imodiov-kufni-acumnacffgteafsgredc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71cae8692ba9ecb2cf7d738a854693cd7f3a1d153d0c79293435c6195cfff639 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-aviggu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a953725771909d0c597ac624c788dde71aa4414663981d9238c6ec2de38eaad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183883 Malicious code in masv-ilmo-civasavum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d68cc82bd2170b58906eb8b70da08859c9faf3b990e04cfd3c07d1f256e0e91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufi-comoldecoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 980942773f1738a9f96b560c1c3535b71166986ea0ab14e646e52f99d6af8426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184870 Malicious code in sonec-kat-fgfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a832ed9f5989ac9ebf09a92688ff51f717a666b43aa7259c907396ddb6b5ff53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2994e50808305049a3ed4646e9b50d3633e7a856598ada14ed9983d993d858c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a46d594f19f1f15acbaf19198e316745ddb1a0f18b65ca0dd920c8b7537a1def This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d23435a924ee123fedd1be4d59bdc45109013146d7d63a16d9fb0e69e978ca5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e925b928e8cc2ebabbc5316670e9ee5efaf8b82a10e719b6ef8c7f389ef7791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ecf5026be8d51ce239af102f511c88374b13c008411eeb161f14452213fc53a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/jorelat15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 206b5759fd7fd44d988e83b1780ba9079ba2efc46620938db780bffb752c202e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/jorelat11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d45438deaf189f973e8f7c291ef5d3c87b8d22537bdad1658159ea1a914f24a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baca8e299579daf5443fd9ec60fdc3a01419cbd261502556ea3f131f242edfbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0e10175d639562bb303a4b140cfcf11dd6657ee0442c1665bc728c1a57a03e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7045c4ca06bdc66b34a35c5a473441a89c23eeed5e97dbc6fed5ed20786de3ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50b688f91ab5fc8b7e22acf04af3867d5f53b468cdebdc0b93db0b5da1cdd748 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae1fe8e48acc441891d9359dbf5e4d834ee6f917cd01a62b99be4ec4c825001 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...