MAL-2025-183394 Malicious code in lobac-ub-jma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7932306511992d3115ceaee940c3690e668a76c9264585239ea245095346d591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185272 Malicious code in tunis-kit-gahufaduuvfadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d5de3efd319f9387dad6ccb98e8ff86b8e49cef5e2eb2e5dc2da602c7e4ecbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184605 Malicious code in odasv-knilu-bofavaunun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03bf4d2991ca6ad4927724b4c282268d998bc3c680d0bc2277463d3be66a740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilmo-civuaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adfad057457619f4dadcfb427a30bc1bf296e9c80a6e0b70fde3281197bac9ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuwabil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65be43a29ddead94cc9aa4e82950f1b14db3bb67d25156f1b26e63e25b0cc379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-gafufb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0c27e8dfdd75fda48b9cef91946d865c73f5c24de991abd12ab8ea9050d5af4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-gafugaiaab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dfadbc7bf5a3df070a4c218bc3989d1882fd84177948ad4f8af70db7ce78311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182102 Malicious code in gocay-guga-vivai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46ea120fa46b65790f471fa3f1560ec34a5c9506ede7e7969931bd1474efdf4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181616 Malicious code in astam-ifit-dabtazai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad14d71565d5c52a364c64a455538124bbc4dfef36319d03c819e5041e55bd9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184851 Malicious code in poliaz-ala-yulabaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c29cb1c1b0c9dd4fd2481964fca56853bd502ed3db1da07d37d3eb84032ffa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183311 Malicious code in libc-ubg-atafufaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0d5bb5180013553d541c1cf34abb0b6cd3047f3175bba6ed78b10f4b870c801 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181303 Malicious code in @akunsansan0/karedok32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487b82990d8adc92833833ccb356c0454079c232164174fd9a2c133f76db431c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/batu7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e5874018da3c1e6a1c151fb11de74ec1b0ee45baafb0576980d9fcdf79f0215 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/batu5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab782f49cf4b697f7475c3b8394c8f4ae96f8913073367c13e16251ae610c67d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb2219325f7b05d18a5b11e78671d08f46b496dfd12a66b2c9c21e6b3c95db13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181387 Malicious code in baso30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b57a3ee29a9cbb10eed312d786c35032608726f9789e9bbc1bc4e728482f5943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/susu11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57de18193bedb89bf38dfe9a773230ec1bd426d35fc9642bfa6f7ab5aa3da317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180717 Malicious code in teate-thy-sonic-muid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 456591f5181f17ac53fb106b2eb4f514b7c4bf716947ed31905c6ae3eb133f20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-fig-dufyn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 389dea6b306170a5fc4fd88b4e68f7d303f5d2bf42be5ea81d749a07cc4e9f19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-afunig-amfaaicaicufia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f201aa56e28b9f8459a8352888bf35bd145d972fe4c08bed3d67abeef28d00f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...