MAL-2025-184519 Malicious code in moki-nik-hujikakiabalbum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdc35b04674fb8c617313394ce9a9f857cd279e096fbb8c247deabae6fc5f5ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184789 Malicious code in poliaoz-aiko-akuvaun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c98e76e3224f985426c8e459d11409a071569f75869cbf2a7c9f7d58a032ce70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184655 Malicious code in oliobc-uyg-afafuig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfd55424c63fe7c7b0348684310e561925f4b56e318f4f278886f64b213252d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185163 Malicious code in sonic-kuoig-timesexa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1defef4ff8e5a745d48d7ece087d36ad1f21dbe727e8b3dfc8b264c2af40e61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183059 Malicious code in item-at-labieagyeyabbjoka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c5aa5ff4d7b099242512abeb901dd99979c4887fb48dedbf2b06b8ff82b4277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eac7a71310e665ef029bfd84a557b19d22dd2a05ffc4f9b0c55add351ed33988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 356e8112859049cb5a85dd3032485f2343078e48b24ece76a942837b778aeeb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43fdeacca2af93853b7f809684a7a8c8d00f9d05a035a3fd3e00094fe949c4cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faee3a78333ed73c52d7333f38f7e4d5685d9f5759811b7290d82465f9961dde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0ceeba3197d0587ff8baf6270a00bd489eda27c6119c10d5a8ac3d00932148 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181232 Malicious code in @akunsansan0/biru44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d92d19c44e81111ff4a3d1c81d0965588dd8161fccc5407ffec667c42ad7473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e925b928e8cc2ebabbc5316670e9ee5efaf8b82a10e719b6ef8c7f389ef7791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 039ef11a13efbc33e5f5fb9dc1f9ca288598ead02e26ee795bdc28d6c7e5e5fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geulis94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae36761dad348bfc6af5a72f56762969382db878c053676dc81c54d549f8df2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/jorelat3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2116bcc295cdb36b79c0dc1152a23c10dfe80389ba0b840ef99b00f067aa0a27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5a6a3ae4a8c03f7610c265d98a4b5a49ca31e64c532a3e0880ad017611820b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ef5eafece7b262363112e158ba153779abe5d85d7cdd99a93b168b6dd978e58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/kopi8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33df09c5bcf7eece7b9b2e3dcabfb5cc51bca8556d0474858d0802360f3136fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181544 Malicious code in roti36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96ee4d7bc16d4f1eb674bdf40eb7cdd9b46250cafe838ad29d4aad0405098cd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0e10175d639562bb303a4b140cfcf11dd6657ee0442c1665bc728c1a57a03e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...