MAL-2025-181693 Malicious code in astam-ifut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baa5f02ad1e2b71a6d5f1839c4bbcd63ecef37b51fa3d0a4e1426575acb9d760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184701 Malicious code in oloc-uyg-ugohfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64de33983032eb16a22d7de2fc80304fc170257f69790fddc9931df520657e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihon-afbaufcaducxabnygs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b93fb3a6f5820ce95d95b13257c1e23e84b9ecf13eb286060354eab6ad12dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184955 Malicious code in sonic-kas-fagiufgafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b660127f1feaa712d039bc5ece4fdf2a36dfe60a609076b2f3d6ec0b1920b3f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183682 Malicious code in manu-oi-gisiasyvasgugo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 805a438c50ab4bc7c276383a08276bc780753461194c3ea61e52991d2d7177e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63182d8d0c60a3d0cd018b412c748c911b1c09aff5ca54774a1dfa756dcc75c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181283 Malicious code in @akunsansan0/karedok14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8002834ffb5b2a795e730681a6f3acf6b237f10b301970add5c54d833d41ab98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-opiinu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 507d1483bab61aef5d368b7253b1eee639f35de8b186aec6eaf62192801b023a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-jaja73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da3a279fc717426cfac9f9e168c90eb534937306d14912b8849b75a21d05a010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-py-finfef (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d4547d8678fa5a74162df2a869a66dcf17d880d653fa4b996df762f29372c62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-py-uflij (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc8ed2c8b00993499e39cbd2cae14c0833b42ac1dff5c78b05dd360682864e10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboloa-minispe-amiialo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9c33ce950ddf6e183931903ece6b7d367c88eb327ec4f06bef7af24122f03f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180901 Malicious code in teate-thy-sonic-rolu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5eefdb65b523c78a38793f7c3d7b78512b560ee9972df4e5d0705a098167527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogihh-agsifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dcbcd6d25848f3364d1a80b5981871f8a8d3a2eea2c3b35401827d31295c992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b86805d5e7f900cc7e24a044339c06c2350e60a0056e24da5a76db4b839faa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adarafdia-bya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a480f35ac776176c6911e8f4ca03e73d1e30193d6492ae35974058dfa00677d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miusan-ndutar-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ce78b43d7994244a459caa4be38081e450f553a7b9f8ad75b0b1b9bc63be9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-sautuga-infaruduitagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0228b001fa9919f6ea9ff2bc461fcb786ee4b209bb463402c7b27078f3775aa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176663 Malicious code in nuilva-bavaim-macovo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05cc9559f6efdcbc4c48ca5c1433f4d5d1070185850de3a008165b4f8a19027c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175501 Malicious code in kiki-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8f5ec729d343fd978e07e0537fb797a92e1c60593fe25647b28e9bab176236f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...