MAL-2025-189736 Malicious code in sun-thread-monitor-void-sun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 047adcabcc874fbcf09307af5ef5c1dacf009d157f5e7e349936d9bae83a1fc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189497 Malicious code in signal-throw-pi-sun-sigma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e40c2a16112d2cd840182125f10235ca77233b407e2bf856c543f547bbbec0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187396 Malicious code in hydra-cryovolcano-darkmatter-quasarjet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2558357ef70a6fc079199ab0ba49575fdb5981e5a25319670df41141c2206874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184701 Malicious code in oloc-uyg-ugohfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64de33983032eb16a22d7de2fc80304fc170257f69790fddc9931df520657e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihon-afbaufcaducxabnygs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b93fb3a6f5820ce95d95b13257c1e23e84b9ecf13eb286060354eab6ad12dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183682 Malicious code in manu-oi-gisiasyvasgugo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 805a438c50ab4bc7c276383a08276bc780753461194c3ea61e52991d2d7177e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-omfi-cafegadad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c38db537bdbb9ac692f0171eba73b63a2a9641bb316d1bbfc96ab3b1a0815758 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-avig-iayafucmfuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca2f3512d637e8aa30c4dd98c4c0b269aeb1c06d4cd9a98ecccbe56b82f0ff1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181283 Malicious code in @akunsansan0/karedok14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8002834ffb5b2a795e730681a6f3acf6b237f10b301970add5c54d833d41ab98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-py-finfef (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d4547d8678fa5a74162df2a869a66dcf17d880d653fa4b996df762f29372c62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-py-uflij (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc8ed2c8b00993499e39cbd2cae14c0833b42ac1dff5c78b05dd360682864e10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-jaja73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da3a279fc717426cfac9f9e168c90eb534937306d14912b8849b75a21d05a010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboloa-minispe-amiialo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9c33ce950ddf6e183931903ece6b7d367c88eb327ec4f06bef7af24122f03f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-opiinu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 507d1483bab61aef5d368b7253b1eee639f35de8b186aec6eaf62192801b023a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176945 Malicious code in nuramagi-sutafia-dagufuag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91f112cdcf9e23ef789e149a4c81d4a498f6d841e90ac8251dbc53dae1e689b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179399 Malicious code in zaskia-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b17ab48f57d0c1b8031d0cfd8524492cf2e06ae5d5a894904d764f5464dc6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38dc12e793251b7a359ecf60a628711581878bc0d492ed76819698b16b942610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adarafdia-bya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a480f35ac776176c6911e8f4ca03e73d1e30193d6492ae35974058dfa00677d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176663 Malicious code in nuilva-bavaim-macovo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05cc9559f6efdcbc4c48ca5c1433f4d5d1070185850de3a008165b4f8a19027c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ssssaya-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c619e8b235c30509afa376f26fa0a8a2e8cec3235c2d7fc842c642960bba682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...