MAL-2025-180685 Malicious code in teate-thy-sonic-meje (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1990f45297a5fc25f8097cf8d153c9605b5177c28486a63a2cc063ad9118288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179838 Malicious code in lookingan-jaja6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a40888f7550ce3a1661a895e80c348ffdcc499d50612b627c3e7dc7f498ff448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179620 Malicious code in kisut-afncg-af (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7000084f86cf1c786b4ef03f36579c55f61562d88bb776c70884dc14e622b906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suninana-mado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15856f1d268a9c2603250c25a6023de27a9f3b8cc36981af2d19a6a351bde571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-oagagfalif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 905229e764f799e0a06f7e47d10d0c24ca5c2edd4b13a54332b0c74c6c8415dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sogdai-ggu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1e5392d676eaebaeea4188c1a1c51075f6fb0a3ad52f10c56f534b9a4ce104b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-bofafanifavu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c01efd5c981a6c59a6f106160e87ce243e046d6d97bc52d69b7871e61672d1b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogihh-agigagsfifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a3ca72ce330fbf113d68681cec823a3e269e4680f14cc787635c27f93f68ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogihh-gaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1bc3e644db390d87f40e339da1ee2e218c9c459ffd4ca79b34d5778b39faa07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-mem-lodo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1e98442562c4b001550ef675f92b87705d6ea5a60729dbd7fd26f957d8247bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvnvi-bonvu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0966d47c80759182b867f75475116ccf0d9bf4a0fb3c0867966c43e6f298e25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-uozp-pustr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cbdf7e34bcdd42c233a3c22568ae4c8b20fd8fb8dd2ddac197225a33c4de42a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-verxs-vrfs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55ebd83a5ed9d1f5a24932c91e819357814dc446b62d420a6cff5e385382cd41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-bani-imbufabaamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 468348f134d8f2f2fc2dd4b8bf3681fdfcae8b776ed05c8b268630b96dbc1fcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-naiman (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e80d0e6ffaca4e52d85c219b989f6970a7709ec5edf726eab4c485b5604fbfcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69b1a35405ae7f4dbe2451e8bd88a0f05a9ef2fe69d02a7b60d750e3de136d6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-sat-ananafin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ad143ee104d57fb19bc0b4ddf1f81706b5291661769418e33bf72a94beef73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d9d27dd3b818e9bb1618cced34902a9ddd8c185521bc5272111ae84401c8c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-da-radatado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3216a076f722471a4b5af30a04c098fb175a037ae6220888118eb0727e97feae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butahu-asfui-duuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2af4245640dd9680a6b8f8ee9afe46facbef530c79f308a982c669526939cba6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...