MAL-2025-172366 Malicious code in hereis-maniac-tan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49e685c063a9430bb495fdd54e6f5aa2fa88319e0d73ac73f7b6be730d346b07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172547 Malicious code in verts-otimmo-figaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a48e2449592c593fc87fc2fe1231f28b26c00de0820523cae560d5ed39576ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pod9r-nutiyaasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e0e8f08fd00a69927e6940432e994463fb23ae9285fb1cee731804ec58d1d40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aps-leod-manao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f13784ecc5744aebb8d9249f1e6a14c8a9c8bea308e36c37ec7f68e63fe5f05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimmo-nagfiogaaokfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3a5f57f05957aa445955170f2d719f7b1156a7d83b7c3b361d5a9d70c8cc4cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heres-matinula-umanbanadia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b207923fdc91370233ed9d0e5be2bfb0ebd679825c26ad5bb4c14085f0338543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172191 Malicious code in augis-lepaod-matiparah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264162510547047e9c4464f0fed342ef71dbbeb81924b6e3b7fe974acf7950a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172150 Malicious code in aps-leod-manartoaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da39a2e5bb9122b6de30935220416055df7e625c399381940841ea8459622cb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172394 Malicious code in hereis-manuic-tamai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c5f56fb196ad2501a4aac5ce6b60927a69cbaf76cd06206ebe31d7e91630fc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aps-leod-manartoaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da39a2e5bb9122b6de30935220416055df7e625c399381940841ea8459622cb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auis-lepaod-maan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c863a1a1c7b6b1966f8de1d458952561fbd96fac8b166d3029e28bc35bee64c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otigo-nahigfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27311ef2532e49c6e25411d9eb3fa42cf5877f12dbc41cd8f13004434b158277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimmo-fs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c16e97f74818957e6818ce7d354c46d1a7ec12a08eb85bdd4ae2bae1c275bf72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pom9r-nafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07e7fcd1eed0caedb9cde2f58524bd845795311bf469a32697fcb782aefb82b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimon-gn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 929aeea438fa3f4f23fcc72691a66275dbc606bc40e1dcf74e35de776d734d6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otfioo-namogai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d93feb6f21af539e9edba392c354b86b086409e6efea0e4eb4f0dbe0a66f1bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miftaikyy/depentts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e293dc3ae4d76c7aa45660918537936abfd5ea40d2619564bad19812baffdbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aps-leod-manusi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b6215c414ddc6944c84f061b2bfc0ce90d6b642f768ae13c019f1dc60a50359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apasih-me-pa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 435ba157684accb406377a20fa537b95d30b62610991f574d9c0b7010506de34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pom9r-nfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12555c254301c4f30e0908c8b2b5e72815f2aa43811226c1743d8bcf5ba3edca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...