MAL-2025-181941 Malicious code in flights-ilutg-iduihsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f65d51f5974d7645eacbf7740216e63d4aa8be3e79248f9234f3ff046b024ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifukilsit-daiusikiula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf28f2ee92a5cd7647e24857fc550c123aae16e26e93ece7c812e93109080e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifush-ugofalifufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86167b4c74de89854397ebea7ca70b7abf2e44ef1e4e59ff6cbfb7555b6f2b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185165 Malicious code in sonic-kuoig-timeseywaxa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeb52b6e652032cbbb6349e6cf449845e2422333be93a04188036f9936034b33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed86574c4c3ba1251cd5c81134168f9f2d53617f0f93de31cbfc6fe859849434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/kopi3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 838b2fe61149882e9b2742be60f115634d6ae7fcf17bf26f5e8bd634bafc06b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/jorelat12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8003530b84e2952598064fd75d30592317e37b8b2f70a50a16c791a321d0a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1c07af633e0c3899745560e15fbce5ba8bfcc53abc46bc611bc55bce07cf720 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c0e585a6d76b1c0889e4e1033a82364482527aeb29d6ebc314d408ef48854b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dab0e4c176ce580b76fb0d45d46fb2799e45fcdf0c2b5d0374c9ced5793eac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ee2aed2354e8c374a729dab61a4963bf542848ee62009bbf5aa8f48c49023e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f88034de893bc9831247c92fd60ecd6f80da68ce75da00ad686e4985e80dc62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae1fe8e48acc441891d9359dbf5e4d834ee6f917cd01a62b99be4ec4c825001 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/jorelat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2c9f826aa129fec86229516f86b3fcebfb20d5dd5d14a3d3d1c700fe994d497 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7b39d2c533474c52338228b6f01d121f4312a8e9827cf8b0b478f021f7e8d6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43155d3551d5488ca32e9f99fb437a954d7505266b35d659977d2c1b92a89e42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cc55eb5e156cee9cfbf89d2bc3f479e45bc198b052b5286950f1b9fd40d68ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40db40457836bcbf74fbc6267fa21f0747031b2a5ef36ffa8104f92e66b160bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee6b7651f46986b656741d0f4804751981aebbd24718f11d523b1de51b03eb16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181410 Malicious code in baso52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc7e1a0ab7db9f9c6a4425933b1af70de64fb636d3d39e1670afec0379bea73b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...