MAL-2025-181272 Malicious code in @akunsansan0/jorelat5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4128fe65a86c17e9a50031e9adc24781bc92e7a7819239def764921b2fb2cf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181227 Malicious code in @akunsansan0/biru4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a26f0b320fd3ed877e7d1fb7cded89b6249f8c634e942e361f92fcbd023b37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181534 Malicious code in roti27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae1eed41cb03b509460a241c9e5c3b40e7f1b9178aa86af9cbb5150163997952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 519d96dfea3499ced282ba083258c78642ff5704772019f83bac2dc103c1ef9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181480 Malicious code in cewe26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 356e8112859049cb5a85dd3032485f2343078e48b24ece76a942837b778aeeb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181518 Malicious code in roti12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eac7a71310e665ef029bfd84a557b19d22dd2a05ffc4f9b0c55add351ed33988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181403 Malicious code in baso46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba864dd49f3ee590774c2bc4b7b04a4b39c4f497b6959b0d707d3285b5fa15d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181529 Malicious code in roti22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93d81a69640cf493340a1bdfa71f21de8a0502ed44adddaf5fc2eedcf2381927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anais-papmoa-ymoiaogia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62d45ce4e04b1b7d17191ba17efc78ebc18f0d2c116a523445e2b7893df64e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-mohrol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91dc569eca6a5ef5b6e10778b7fb659ee4e0f612d1e6980f912d3796fbde2e69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-cahdu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d521ee3ca77a15662958a3c89b8f41c6fea841cae27085a758b495294ec48b5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-fafunig-aa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7df6363fef91d19e81c0a0cec5d513c4d35a84801c85a9af59368a77614d4377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-novos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a005bf88c7d29cca3a5a9ad42e23297fd65e601e6e39f4e9beac47aed02f66a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nanakila95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4ec31915685900fbde25c035a04e9c4b95d2877c5d0ff43cb2f6b0a2fd6aea9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-bagut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef728acd4ca27829ea2181a225d764bc27da46e1a3eef564bbd77b624c996bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-ownub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0df60d91d6601fa7d3f0c12ca453e817f148827d08c04874fa5a8411e3146d09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-piji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8385266961cd21a61e2e5b9cb0a068e1a49eff93b532266101182a7eca9bd850 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-orifag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b3795eec9c40a85c0217f60c20e07346c0b064131df8a165bf5bb54cd7a0595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-oslan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c9de08a4f5abda3987e9c9bbdcdd7c4bbb2c7f908431aebcc719a9f41a1973f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-bifgim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97fbd8c304ddf2eb9b4707b865b56df923532391b8f4952168cd980d71365263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...