MAL-2025-179793 Malicious code in lookingan-jaja18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82fc458eb256248845363589c48520681c2f92dd93a7b54c8c0bc1c9a0111877 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-fig-dikanamufami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f40516f0a273bdc21c72fe7ca3d9fa2631946de9d2fe97c7828d0ec8d25628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-jivte (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f85e60a354b1921f1d6d2b793c22fdd9ea2f8e654c63b7e7d0f322d6c43d2b2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179984 Malicious code in lookingan-nanakila58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 764371111308aee8689d8dfa7e3ffd32add5a8beadf6310f54d4c1d011606617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in igsboloa-minisspe-amiialo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ecef925919df8bc37f8fbacbeabe3db82fd866d7a83773ca7104bcc19d05275 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-jaja24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 530766924f716bb0c00e3d6f6decedba2c02a52371991d85d780ff62fe20f382 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-rinisu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c83a4942c75f1f72ea41614a735515f9f2f7cdd8e1f5b27f8ec5f5b75cf086 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180119 Malicious code in teate-thy-py-voeru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 967f63d452e618238b85c4f142b53956f0c1312b722fd8ba85c8fd1e99cfe2c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179573 Malicious code in anala-aki-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecb3284e78e4e2bb0b358cc5ce6f8cb129d5b44c5859026ce5d639944287e864 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180907 Malicious code in teate-thy-sonic-rubeli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82f822f66d340897e930091a4f013de5b13fc11fb4d2a843bf1d74f84f77d34f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahnim-sati-adagoima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01bede1aae61ec2a19ed390ade5d41c913062301bba7fb3ecb1397b3d40e19b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafiun-tufa-fuagif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0f18f4774575ab7cbf4e3d2431a58f39f829ed2b24c4845c4573d7b33b13295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-daerde-oagfalif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb17d20b767e5f1c2cb61f1abf5aed5ab6b0f8de9b91c33cddaf99a74e6ce8f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teadod-mipta9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1158e3777f5daedd1980d213e0f7cf3f1b9f7f8956a72a72544adb9df3d30d33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b2af4a04fb8186b1ca01b2e13726b82de5e4335c7726f4137499d6c9f560466 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71590f55654b739331a2c0d8ba0f47dd009245b63745d2e39d2ab0cd0d585ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erftads-eredd-trufd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3693b1433880712b3f4871fc98240590fe418288703e30316ffb3ef56e68a650 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176619 Malicious code in nuilva-avmim-ravosv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b63abdc46e41a842cde54576372f5bacdc4d73a465f54f93f4f7a1d0d03eea6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nerfaa-ndutar-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d3d01a3fa7cde71a2614a5e34db4d301f18089ed01d10aa50309cd038ae1377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmih-avigpafdoaag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34a9c7ccc03e11056445b7836b7aa443c5689db817b29cae7931691b98eb15eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...