MAL-2025-183466 Malicious code in lobac-ubg-abufe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 877c7ebeac9b2ed67eb57720b7a6add005171bc8d4bcf1aebf1b98185211b3eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182607 Malicious code in imugay-avig-ijuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8197b151c3d93c0f9bf8a36c4cd2ff404e9d92a4bdc46343f5f6b6f98e944f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-diguafvoatav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cd6af9c27d269b27d9f175dbd508d14a4bb64ef38d342d2b5ef36a39a59d303 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofki-afuhianagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fffc18e7ec6285bb29c7408ed2134204af966c9df1782498a82c4bb1e113b838 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kidt-aog-ufav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bb28371e59295a4812b9935160f3512a46af4d6a7fded2b098996bcb6539874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutag-iduliabisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50f0eb3d61a9e124687adee5da834db13d8ccf3db9b053e5138a36c8374a73d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyib-gisoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5448eb67c5645daed2f5a2c6e989b0e0e589ffb5ab266125560e77419bd5175 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tgacedcuadojxaav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ecd762052c83b2a90d8745a329c06aabe226b57af566b57813ad3fee933065 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184751 Malicious code in one-kat-ibudafrufdaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 934419797569753c9203c663644205e454f5e77ec41c80f049096859528b0099 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185068 Malicious code in sonic-kots-uyaidoagibajb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43c68c5af1d045eb717b17918fae36cc8c2502237e0ddd9a7f037925477fb988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185284 Malicious code in tunis-kjt-gabisy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8a370f2f3d03aa3d861ae021ab53263f395e9e07ded800c1d62b8236abeb5d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96ee4d7bc16d4f1eb674bdf40eb7cdd9b46250cafe838ad29d4aad0405098cd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f73810039b1b5968179f8e292d55a21c44352133d2468d68a5985059cc959735 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181435 Malicious code in baso76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffc478ab8f5c6c75f6c832b875c8093f73ec2ecbdade80a11f69951dcd09b310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181195 Malicious code in @akunsansan0/biru10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e511648cecfaa67f113fbdbc834928ec9009e87dc58ef1d23a4cd0cd1b6a4087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181180 Malicious code in @akunsansan0/batu16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b707c9302324b186f8f94207abc4d62785e0c05adae0acdd4f6bafc237e07093 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-jeje20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 086643902eaa6b4d847e81fefffc5da66034b38c408a860f8758f7b1e07ff135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180197 Malicious code in teate-thy-sonic-bezve (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ad50b3e294153a68d91899d0cec2fe29bbdf9a643ab3e5b375132039e75aba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180220 Malicious code in teate-thy-sonic-bumaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74aee52b1e5ba6cc1035904f38388a479d909e4948af625819e24ce0ad6132f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anabuyi-inub-ninni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31abadf1efece24f402542259f225760821547a638ee673f151cce9a695fec75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...