MAL-2025-186237 Malicious code in command-xo-module-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd904aec9c3a6c08fbd9825ef68e0a13af99f7a6873004f2183b1f88c4f22d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-dikg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90022fb9e51aab356734925aaf6de982075f0406473d9023ed294ef58b67d036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183900 Malicious code in masv-ilo-cva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e0bc4ba5fa019160de40aa8b58d6cee15e543bb59c4c2c28a0c708fcbd4e4de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 157f29442f148d3b344103b45865c1b2ddbe2fc0b35ef36d667f85ecd3f3619b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-faig-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9322dd7e911d2b5c30b194e61b11513ad026ae616891c2b14e49c04c7c00ae47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-zagub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 945cfd83e1e95cc897f5f672cfe9db99043b98a3f51ab02804f2a950a400c234 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181061 Malicious code in teate-thy-sonic-voze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 714e89d9b5d48ad3bae6b65d0c529cb89636e1c664d69c68b1e3874991756ac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179705 Malicious code in kisut-faig-dikanai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd84ce7273b77bcefc804e137e81422475c699b00997dc1217bc67dbb6322de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d81629a108c1c22751904c02fdca540020590588011d855c481b9775f8a2895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tufam-iunyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 009fca2b3b09f252de6ea56c9e256e3dd38935e1eca7536c33fb720227fa6bc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-maba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9793f6e1b04ac73449c530a401f840f1b8c010487fce0c7f38b77df440daa14e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-aavof-afasofavbagdao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa1c700c83bb48279e2e4adebe63e7a63dec51e4930199b41b7191e6894d8e7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173311 Malicious code in buta-faag-safa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 552455214ca3d8d2f39f69365b1ad6b606ddce8d74b80faa22a9e9a28ff1824a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177923 Malicious code in polymer-datdfsadsid-ragadafadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d96edab443821cdd662e5c2eafa648b74cc3513e74503996c3e088f5f8f8281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176653 Malicious code in nuilva-bava-mnaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 883486e35e62f7bfb93a23b702d62e1e2b2b3811e78b02f2414b130e475036a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f1dc9319375a8aa56a499c59b5d7a852425c65b46a61ff9455aa5a05580117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b97ef8ec6f9b31e1f787cbe8cb9f8c53d8e594c5a37767fd0f33b50b69347843 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nameka19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3bec11dbcf510b4446a85973bd4ef1f5c0fa8266bba25df447ad8dae0aa5071 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tobrut-naughty-nubliesp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15a181a3ab4dba979530f420a786f064ceb158cc906e5cac6fd72d8bf8388c10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f102c9855ec7568c2b264c031adedc2ab31744aa10f510a7c9843f25a3ebcc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...