MAL-2025-181954 Malicious code in flights-inlutag-idosabhao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42866ddbee55bc2a23d63fede92ca621bd3d27781dde1f8f3e854e0164e5230 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184941 Malicious code in sonic-kas-ahagafujiha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 845b292470eafc13b0b4b09fc30b37e4bdd96c5beb6974b69ff9f02a14dfec58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183989 Malicious code in mitok-doni-olialobna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32f546a2d905e74f501c7602e9828d933adbbfdbb622acafa01211f27ff97c6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183472 Malicious code in lobac-ubg-afdmaeu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2faf43bda81f60c68998e04af4450c5171b99bfad862c3619f33cfe8e9ad009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181204 Malicious code in @akunsansan0/biru19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0ccd8e21e64f04ef0fb7a4cb56757c60065fc6b20f77e1df834184b08ab4c77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181219 Malicious code in @akunsansan0/biru32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d61482421bc260d0bdb377f7c17de2b1b6f6242d5a8142a2495aa389540b3f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-fufsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8688b516ee4bef334f896aeba64d57c449e1e8b7e7da449dd3395e72beffe8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-bulhab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 893cc91ad5ccaf0a31f9ddd4af2278c9c517f09fc03a2e515d2d25d3b49e6aa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiudt-acog-efiuivucafav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 938b4e205d11406a429464a3c7abedb8ec037e6c7d4fd1678e6b00ca945b8092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181045 Malicious code in teate-thy-sonic-venmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75e770656630f34fa84cb0189211eb94ba6d00c34dc8539744f09b393103a5a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179640 Malicious code in kisut-afncg-avaff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f0c04531f02e82b4ae9717dde435d7fde50b3fa2cfc0bcff47e3da48efebfa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181013 Malicious code in teate-thy-sonic-ugote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a9b30e593b71368a90e8df5379d5d73bb1233d69fc46d5a5fe7b64e5e4ce554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 046150d07dd75496509dfe2ddafcc6e43f021a75995e7ab3950b7669ee2f772b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fna-naa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1324a9fa13d615d6fae12a0cad107ec14c53d26cffa3f25fce563eddc2f59ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-adag-sgdahsdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef772a2bfd1b19dba4ab4d748bf3afdcf2f853f33e81e06d24766268689170f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74266befc986f47652eea441a4a62984f337e202399f694cf2034d87563af1dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socovni-favnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6293705564f1d09db55057f8984feaa9c9d0ef5332cb5af488ad441fe5d1c13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banbo-imunasgsbgsai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cba65f6e4efe08a7684293b1f699fcf99755ca872723b1cd33c9b36852bffd38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogngh-amagian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe7b561c2317ae8177d01c4193fbdeadaff4ef45cb3fb36ea5385958aa1288e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-busrt-vrts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1379badd84bc7aacd2700a7ec20257e9714e5356c245ff03579f104764754d39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...