MAL-2025-184116 Malicious code in mlokok-lofeaki-akiagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0d053fb03abf4a1d8c319d69e1a173f44f62085cec8272bb8e2c1d94870b6ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183538 Malicious code in lomi-fis-fakugiajb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0cb15ec43341ccf7fad8b93edec0cf4b32f43215b0768f5a705164f501711d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185292 Malicious code in tunis-kjt-garvfuavimas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a07e56b8942d6e20411b54645e2ef11dadc325d1ac7782ec3fb6e51380ff19cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/pucuk7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7110fda85f6f6cb0da43d4672be16d01be8f9139ee302407a03017ef030035e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/susu7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f8599f5c11b2d5de4d4126333fdf8b7fd7975be78143ea464502273a0a276f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181459 Malicious code in baso98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03482c981ab225dbbcbe2ea498e5cb2610599ad6c07726b0a8b20aed1692960b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-faifg-avufb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc360a04ccf93091269272f1cf896b94264fe7c4926ae9c12a5ffa68b14b8030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180773 Malicious code in teate-thy-sonic-obrom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d68a614ad015f79189a55ce1432a18a898d3ad227fbafcccba3e976d899be875 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-coso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4575618cfc63ec13351c2f09e6efe06103dc49c15a19b7fb177a04558dd1cab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-jaja58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f77ddfc78b2d8811a1e18393582e6bf07f0eb9e7fff56c885d9577a53ce607b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-jijrud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cc041c5ac131e9710428a7cb2262027b210c8dc3631e42f51714f3bb2c63c4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180048 Malicious code in teate-thy-py-dasak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12b319e01f402871100993159ac5760b2ea48df2dde6182b47cd4016fb9f0fe6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anabuyi-inubuava-ninni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e877d1246e31eaf8ca8cd97f27b2c4e86f91cdd632219f8ac5083e0e937f078a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180311 Malicious code in teate-thy-sonic-dujcif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 002d5d6292ac5cbe7c3874823e634ec4cc17a95f207bc93f1b690be117e26f1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180157 Malicious code in teate-thy-sonic-alojer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10fd844e1056961a7136d7d4f49ebe74d756febbb94ac684e57685e38968aa87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haruni-poke102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc6861bd68c581810e950459e24ae3d7f33e13606cc523c434535d1c89fad2fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-datdfadsid-fdr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0dd403a83e439d002a2df7166984a7160d0f55e1d79e6ab588234416e988689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaka-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4f67eafc609b3dedeab573ea7f2d28e457e81b3874f30fe0d889b6ba80c8b9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-fajmaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5237effb860b045f300b93e87fcb3b28f46eb47e2a7152a0e94ba095e05322a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rusdi-set-rus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1866f9b40aef90d348a8d7dc3d70de0ef011ed43e9a80230556408d793d1554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...