MAL-2025-181068 Malicious code in teate-thy-sonic-wagwa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55a1ce92c9d1651574d0b549a7fe6002739306a9f0756d0b6a21093ea58fea27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179460 Malicious code in aiboloa-mionispe-amio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd3d5791fa9d9bc33291ef7aaea8595a20a78e8e3623cfbdc33455006434226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erftads-ertg-trufd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 185598f171c8cf28d8ff98da49bb81a424fbdb311cd2bcb15e894de6c18622c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaism-lmior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 065f51172e3cc54a8eb0b6c79362aa0b0adc90ede1a03e0d1c9ad23642781c76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ee4d711a3e262c89ef278e88768444a1a33165c895b2269224bdbc4d45c9305 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ukutoila-joiluna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9d928461b6d1b07fa093dd2e8bc7acd69904c64d7aa4c1574110fe5f3df79c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognmh-afai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc9471edc28d52c15f0ec9003fd2d6c49522f3ee445c66b644b7cdba7be0856b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kil-kokaialiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97861d577f11fd6c478ce919ccd412caf0f9118c86b51bb19a14826c58fbb8a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mibasah-nuyag-msidnsas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 245c795c5b94f29012c3c42e8846bba988b04d64af94e7b76df0b0e47e6fc7e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuhhh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 297b055cf4800510d8efcfbcb4d357c3c57efc3a2a2c67a41da87802c177d964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiya-suayu-ganoao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75efb949d8bf5f037d9a12178dcf80fe5f12f7aa07d1253a18b42b28fb8f45b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banubo-imani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cad999f66e7c49a76732ec586a0c25b645ea73f1e8d5b751a66025aa72dec7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbona-gdoda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 376116334a2b441b714046cfb08b51392c74f53fe45225a32b91f35966bf5d35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3ffbf5f8def90b5f6b01a2f5769015a993ba5b2e5333c835cc4d103c27fee18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-daarde-gidgaodafogf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 846163e4d38b4cbf10d480c241b13c8563fbeb5792a493d6675a6eb3e37c9b7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-afiamaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10f6d7ecb93fc98fcdbc432b1372f710efbfcad9416253455da7b68e3933dcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in risky-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d861d4403b36240af62797b68bdabde0dccf7992c9ffb76919edff93f66d31d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banbfo-imunasgsbgsai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61b439c48e7422c2f2e2fe4f0af313e931526cd9f9f929c93c99b81c023c2694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogihh-ffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f0c37710206109c5b6c2cd40e3fef0615ae168e3f9dad4afa3f376bd7f3742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofgdi-uafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fef22b07097115582bd4987f6c22757c415d83519fffadb03bf485b386622aee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...