MAL-2025-181804 Malicious code in avangs-olim-anmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f89a2b9e813997a61053a92a6e47c88363ff8137ee57af4a63198ec998766b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/susu5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a28a6ccd23bb771d08ca6c7b347068083023692712593c7e2e75aa2926176557 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e925b928e8cc2ebabbc5316670e9ee5efaf8b82a10e719b6ef8c7f389ef7791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dab0e4c176ce580b76fb0d45d46fb2799e45fcdf0c2b5d0374c9ced5793eac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bba039ba827212c63c10613bd28ee276bc305fee8c00efeca20ae84bd4e11c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08531dd6386f4b370db1bfa2bbb50da4539c83cb1d4d2686b7a729bbc4109195 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eb6d54224554ffbb5bbd360c1dfe3b6b3dfbd3f85150047bb65d8679eee6eef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/jorelat7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05424ec1bfcc8371e06aeb3f04dc8ef69d7190a0341de389f28243d16463a6a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf2a8352771e356137fe25b3597e8d9f38510e06379a2ad5697a79ef84e5ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @oppo25/depentehtea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 209c89b2d6e7653b79cef266c433ea07b9ef949901816d639ec9eaf4f3bb245a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30432758b1d484b88d8d61f8109e9450f98d8755a6bbaff4b3d4ddafa9bc52ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaguntur99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51fc097a34987ba2d92daddc67d1026757bea8d1028dbf629d10cd127588b43a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c01b2f8d6dc042cfcb01fc2b7797a0856b63a0384b61919884e5d5377e6b8d29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagunz99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db501ea6272a1fa5bc126cdeb2ab63229b951af87824ba28a08d55184d343a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fd5f2b5f0ed84ce72e37c976c0d9b0dfbedc5f64ed6890b498e203fd75474e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50d3a6ca4a868b02dd93fc667dfdf29195356ff861cdd7370b7a4a2dfd4a103d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tea_gun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51b91899ebb45d1823365f56b05bf076f87fe9a23a4776026468a2112650985c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61da6f7ac2cc31c818c1789be09f08acda2f315a0bd2d0679302512c22f61d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a89bb9f64248f16b8da630c9dbbd2dd15ddcc3cddd96ec4fdbb4fc0c4045bd18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/jorelat2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95f7c5e1cb29b5039ad5c5c990490c3965843179eb94f762b13f27590f7e7707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...