MAL-2025-181376 Malicious code in baso20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5606ee6e395396c689c9556c4a8e5d0ad54ac4ab647b76ab5bff2f9edbfec32e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180868 Malicious code in teate-thy-sonic-ramjak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2095c16421ce579f4e386ecba1e0e8702d97973855e25cb8028b42b1d83c264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180807 Malicious code in teate-thy-sonic-orwil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9ed2c79d94c6f8aee06ebc52b503b631a6fb24ca3ec704b2f2a74dc904c2c4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-gbfafgafisi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b381087d1a94453d701953c38de6cdd49099773bb04442e6225a9389562ca3c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asafi-davatihu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c99495fcde25341899db35c61ae86ddefea7fe7b906537fdcc14f09ca73fffc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satidaf-faivubs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64a29175406badc58908c2c8552f46d0ac6913a598cbbc2fcfe94b0231bd0a66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175286 Malicious code in kapvino-socvnvi-bofnvu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0ea0e0fb6b11980b81d7a8a5eb1ece9fa3cbe45e81ee2cc621dfb7287c33054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57519de18ebde216bd12ef5ed4aaf84b0fb1f050ae2138a844796c079f047ef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176794 Malicious code in nuilva-darde-agalif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 929c28f424e8056da7b682b956d21444bbcb1bc71c6f75f6e87f50b0d8d14994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176101 Malicious code in miftah-mipta6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 534b27354b02ba43d5c80f4aa250b8523d0ae3c0de133efeb99b9514c56cd581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-datdfadsid-adfadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbfb1b19d41e6627ab8a5247979b22146296c326d117baa080b91c248268eeac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178202 Malicious code in rindaman-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e902c9e4358e56918ec40cdeb88b5353d3db457934ef27433185db63180848b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173175 Malicious code in buis-manuias-botayad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 534a0e91a45179b3677bbe483c01642ba531da66a94c5e42f6384c2ebd1f50ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175020 Malicious code in irfan-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 956c6b65155cfcfffdedfe88fabccacb058f95711e4e3a35aa760d4a3498de69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171508 Malicious code in lokap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b1ec63938d120a042243c01c8f26064235da8b9208cf14dcc58097357cc6f50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171995 Malicious code in williamdavies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e005a21c0956c2aae6ab17fe8946fc09436b812a3a1dc189926116ba5e7b824 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymeria-mayania (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36cbdd8c509d7632e2717513e70f71a6b586e5ea703e97970dfb09c3eaf822ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juris-fras-dgrs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41e48d4f5c7a745daac2c33bb049a5f32539ca1090439cce5bdf1390cda30dbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prayoga-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e54212d9f39e75d89d1ce6717868d02aa36eb0e930ccaf7946ad998b198216b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabuoaopa-muyafig-budfaiufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc64ab1950d93a41ac83cb8dc8b650019b05ff82484984bd9a702163c9888c0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...