MAL-2025-184611 Malicious code in odasv-knu-bobacofin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb59a2973d8448b30750ff3a755fab535d3bdaaf8b8821f6ba4a6f339ef6f975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181809 Malicious code in avangs-olimos-nolianu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e46c10271106e82b1e35f8b920a001b4961967c5ceeafb34ef2b6a467efdbfe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/jorelat18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93d8538f3671e63c1df51f039f5baca088353c5f8f2acf8f1339099d5f5332d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181529 Malicious code in roti22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93d81a69640cf493340a1bdfa71f21de8a0502ed44adddaf5fc2eedcf2381927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181238 Malicious code in @akunsansan0/biru5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d732896937135358bd1c7f8630d5fbcf18d22b885d160a677da8bba3055bf5be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7045c4ca06bdc66b34a35c5a473441a89c23eeed5e97dbc6fed5ed20786de3ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181314 Malicious code in @akunsansan0/karedok6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1ceb1dc5c496f9ae53d179c45647d6e99ebf5d062e4180a3c320300983cf571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181470 Malicious code in cewe17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7db5a2dd5d562550344d403f9714aad78c6996b98fe8625cb2f6b401dde7577b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181213 Malicious code in @akunsansan0/biru27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f73810039b1b5968179f8e292d55a21c44352133d2468d68a5985059cc959735 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181294 Malicious code in @akunsansan0/karedok24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76bd47f334375d33b7f5355699c2e96f3d242ef26ea58acb851da24561ff8a3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mizukiyakane/andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a90db93e707b727bc9a67be13b7691efade656dffcd3799375f8455ea979b9d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-gawoko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e94f78f34c87b724ad34ffa164aaee0e3a4501b34d82a8129b6a32dcacf75baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-liled (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9453de1c02345b6283f0ad8a8e418cb424a3ec321489ae72ad42c51f307e1232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-jaja85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e75dc2346c2da5634b12f28bec57e4b0084441316cb3b586812f02f423122fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-py-tunne (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6755bbc4dcf177e923dbff66477a1b10d9b4a57ceb78a7f7ef9aba39765d6466 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-burem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c6fa7f6f65f9c7b7bb92ce56cce51817aa35030369306adccdecafa982bf5db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-zido (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3dff952148922814a4419de87567b60d176c3f71564a58090457391bfc3b0c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anais-papoa-0pauafui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de7814b08a712034c294f55b8e9316313fbcdf794b188307fc821dfadbb3f97d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-ebek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 358a5eb264df3b67ed4234051b650daf1bcb2add71da3a49376abc2a923d2aa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anais-papoa-0afui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ae2dc075a8c6ce2a8004aa1d98c576dd52b8d97b197950ec2dcf8cb9d7cb6df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...