MAL-2025-183694 Malicious code in manu-oi-gsi01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ea378d1c24203619246c20ded82eb8213f2d4715d9142815460e907bc9f9238 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuiga-alukmaibivza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f99c35033e1f4cb93aa88ec8e17c4beeff485e0dd2074f7616f1c8bdf100e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-kvu-ibuagoufaucab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d0d28bfbe91b7a88d650d9f1208b8d7e1956d98410f52c489d8e692ade55d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unise-kit-bograi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf554b7ea569e4f089046599bf56c6e92019f9ebd7625a1837f9ced4619dc30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c01a65223eb44d8759a2d8f5521ff1a2a66aa5855286f6c3d47035d4113813d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/teagunz99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1e18a5bbdb53c917f71debc48f150001f8a1c6a63a6373de4f96450e9326fc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-otle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2522f9b93f25a0681daa23a196b8f1ee5522c141008ef08ecc72fd3dbe166691 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179451 Malicious code in aiboloa-milomipe-aai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cd30cb49debd627aae49ca3dcc10e9fd855f2dbbb73cd4e79b19110f6c9bffd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180046 Malicious code in teate-thy-py-culuw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b31cf766388f3fc0bcdef30e4987444f48d6059a5249c84f4a82e6acaa1656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-regkoh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c7d78aaa7377239e28ae8bb2745864d58402d4ebd436584201f2f7583c8f7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anala-akin-inli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3952a78c69126e45c0ef03f6db5a60862b7cae3ce9041db0029f92e8c7719c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-utcu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1819160860120212ba821223a1b0e3d4b52fe5545162639205621310133a303e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181119 Malicious code in teate-thy-sonic-wutlu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b9afa5b8cafe466c49cf7ea5557ed4cabf946426c1c9132ca6af7c46570446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179989 Malicious code in lookingan-nanakila62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 852e61619f8b60bbd7d647e6d8c3f4eb4ee45ff5368789f09361337efbc84e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180651 Malicious code in teate-thy-sonic-lirim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532f83627cfb162a7739866f0969a560e3998c123a94491c4a82e0109ef84cf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksaki-kaisom-aolomalao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947c37fecfbb1c8e71db2b91e2a5132ca70c2d9c1f9f248ecfe764cfa44fd2f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminamh-faaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 348aaf32db8105b2ad43adec2efabce1bbc853a93f8515ab57b8e9518d8fee53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175681 Malicious code in kuku-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fb79ad4ba9b511fbec559042d8d815d4a8da98ce876208b7275bffb4c0112ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173705 Malicious code in butanaih-fafsa-daranusi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b8bdc1a1c80b1625c39e96843c91393c91526d48f9a165531bb69696ecddc91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gibfaaga-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1494ff6c654646f8dfb78ee7c98da5bf180f6563ff3bd2e27bba1a2dee250dd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...