MAL-2025-185259 Malicious code in tunis-kit-bogavi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57898fef6929070fe1a668ad66a7e0eac73eccbffb35ab0ba2140f5b23e5789b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181802 Malicious code in avangs-olim-anaumini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e4408bc82adf35cd61cbd01905f91678c8966eea3fca3b46bb2481e87880e62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183635 Malicious code in mahnu-nofy-gtaoaigaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ada292464bcf41a4498b2216dc4e410de35ccec62146a816b0e0ce019afafa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-diguafuvaoatav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa45b7d73d3c551bdcf55d053c6b768bbe5afe7b6429c79985ffea31ab632ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-avcafivaivcd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 023c64acefe995d2f8caa73122bf613bd9105a6a9a34af48c6d3d556042fff8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-unga-fu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55cccce9c562e0787be13ef05abe15fc5c284143d486c64f21f87775e6999815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutag-obolavui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cc080d5e03d7dcb3fc63d724583c1fe339734b4aa3bc0c8053f20d9f673ecd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uinaga-auguf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16af38931dd6492a7318bc20ac168961864e8ae39dc5bfef3ed86624c7488cc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-if-dalimiankunak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd4e5714554d8606d52cb87fb11402c6ff6be45b951947d72f1a17085c6bf6eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/susu2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1f50e585eb20d203a5ec2989c33c26a3e3d838248cb79247c1725ab411df5cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181177 Malicious code in @akunsansan0/batu13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30b835595d79d352ff2f989dc04be6ed4e61d405c4ab31ea6ccb50502a1a1891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181523 Malicious code in roti17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6f53f8aacadaef002fcb9f55ea7de96d7c0c6bbca382300063f1c7e1c942441 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-py-doki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a1076436d9950e649e7d58355d3eec3db31785fe3172631c29b158463e2dde1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-pebede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef7a6052b62441a7a0601e6d63ccbb6c4f3dcc32d449ddad1fd22de63b5a1aab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180323 Malicious code in teate-thy-sonic-efukum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b61334489bd115a455f3449ff7f49b36f4f663726933ba3118b8463c80da903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180537 Malicious code in teate-thy-sonic-jaddop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9de719d10c65d36d715c7a3297f9789cd29c796b436d3971c0dbdf299e306d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180820 Malicious code in teate-thy-sonic-owihaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81072341873d9a8bfbe53ff656f299feae038bde5210179bf17340985c86f5d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anabuyi-inubuava-ninni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e877d1246e31eaf8ca8cd97f27b2c4e86f91cdd632219f8ac5083e0e937f078a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-ufpen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bba909d6c64279aaa84c28a96ee541dfda74034176a85c5bcee8debe6ccd70e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-zabag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 154b632d9d467c0ae98f207fa1292f3c4c1ad5964a55f011fa88964027e77202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...