MAL-2025-181306 Malicious code in @akunsansan0/karedok35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb0fb353ca3a9b3614fe0b742212c12dbbf180c1cea3663f31e5d84566e897dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181520 Malicious code in roti14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f2e98476fa72fb95483f8d8cec8f0d0a11401a7638046073d8edc5e8beb3179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a1b3034bc98367d6acc47ffaa2994a7dccbf56491763f2bd4e75da60c14f990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181395 Malicious code in baso38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bc92e86f8dd7930ae960a69013506257a6bd3072b232759020780e19cdc2e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anais-papoa-0pipaiaaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 182e8249e780a8d3f2e01772d37efd3729b314444d044f6afcb7236d94b97202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-mapa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30ba3598f1afe39a2e8bc992dcc422b66032188dacfea7823a554c61b7abd616 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-hewcor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6f69eb34c6b6c3d40b1d31aff7b499de10f3be376bde00ed48e008ab536c00b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-afncg-avafeucsdsacf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5013336d930337b1116ad45da28ec20f9525c9e4eba18981351746e925d38d12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-jaddop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9de719d10c65d36d715c7a3297f9789cd29c796b436d3971c0dbdf299e306d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-jaja3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 317bb4434438f41155e476727d64d5e38853af9f5eee0367bdc2feed00292191 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiut-acog-efiduivucuafav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f7fe26ba9a06e17e5687cca0f5083849260d740c4eeed478de841ccaa2068dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-memma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25ac99ed29d45175f479f1f35240f51ce5fefd7462f8e5b810d8a7cb301dd6bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-fafde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97a647e1a74d88e0fee2f6745dd479862eb54727608a4ad93667dceb457d0009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-reki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed5dac53f8df7d2cc81fcb82a00dbf810913f5363f8ac35f3a3b8a506e02a9da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-zevur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c1c9ad8079bfa69b4d6866fb76b12663acf9bd2bd9a6086e6a9374fe8428afd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-jaja103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80123f36cbb121d9c3f9eb0fbd8acc061bf1c88078a6b7ad0cf133fdefba23be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-muvu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a3aa495fd8791c8f9bfc30cdb9972eb3da71111202ff5d864b1096e7f24a9c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179744 Malicious code in kiut-acg-avefivubug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8a7ab6f530f7639e392312915106e24d5b8eee01bb599f4a368c5703fde007 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181041 Malicious code in teate-thy-sonic-vauk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e940d781827ae6bbc3987c11bb1872d57ed96ebf26442c29241ef7ae464d1fcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180868 Malicious code in teate-thy-sonic-ramjak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2095c16421ce579f4e386ecba1e0e8702d97973855e25cb8028b42b1d83c264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...