MAL-2025-182454 Malicious code in imodiov-kufni-co (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f4b68274db53f56380fde73727526099d526f767f02cff775409e6f3a78964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181972 Malicious code in flights-lutag-obolavuhiaduli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7296a51c22efab2a7e2ee08056fd00268b84dfc524d211e70ec653b67d1e3bf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182500 Malicious code in imodiov-omfi-cafacevavisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74239e377d229654546d40ba4e0ebc294e6047e21354bc1dbdf02c77a0a80d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181635 Malicious code in astam-ifst-digokia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae195aa1b4601649c9c76523ff4eb6258c715e89e4da7cf318cf1468d077783c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183336 Malicious code in libc-ug-atafufiaafaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77068e34e94237a64b817e5c84cbff2d167e2e865d515f7d41fcf615cc3d0a68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185107 Malicious code in sonic-kuig-tgacedcuadojxaav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ecd762052c83b2a90d8745a329c06aabe226b57af566b57813ad3fee933065 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184936 Malicious code in sonic-kas-agi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6c9ed36ef6df1a66b8853f690979da604f83f87eb9b6dc14e469a17cb8c54c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181673 Malicious code in astam-ift-digoksnla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef33f4923305e51353cbb7aad946aebd36af6eb3fa9bd2a2a3e4fef383e5aa58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/batu11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bbeed5eb8eb657446bfc327d377579ec412ac3e2969f75fac4b47432acc77d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2994e50808305049a3ed4646e9b50d3633e7a856598ada14ed9983d993d858c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gntc_94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43b361b241a353cce33e3df6a9c52d2054202e85937c822b65f8b096a8f4e4db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae1eed41cb03b509460a241c9e5c3b40e7f1b9178aa86af9cbb5150163997952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 072fd922e4d4dd49f3d66f95ae3c726918d2c4060dfed6195861579ef715a4eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181533 Malicious code in roti26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 040aed06c7769209611781b3980b6d7571d5a4fa429a0810e1f2549a034bf140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181280 Malicious code in @akunsansan0/karedok11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0795dac672be1fe9781bc1d8012cae25d69691eb83bf3d9533ed78a49085e27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181302 Malicious code in @akunsansan0/karedok31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58e335aa68ddf6da95022f7fdebadff7a7322ce357e05f381b2c8c4a73712418 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181274 Malicious code in @akunsansan0/jorelat7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05424ec1bfcc8371e06aeb3f04dc8ef69d7190a0341de389f28243d16463a6a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 039ef11a13efbc33e5f5fb9dc1f9ca288598ead02e26ee795bdc28d6c7e5e5fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geulis94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae36761dad348bfc6af5a72f56762969382db878c053676dc81c54d549f8df2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5a6a3ae4a8c03f7610c265d98a4b5a49ca31e64c532a3e0880ad017611820b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...