MAL-2025-180941 Malicious code in teate-thy-sonic-sumhub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf26cb00accb173203e761e8984f3492b82b8e7f58d96ff3c25f5f3742e550c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180170 Malicious code in teate-thy-sonic-asipul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbdab016c5bfa66c208043cb40425c960deaeff70ebd6214a707f99638c6b35f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179931 Malicious code in lookingan-nanakila100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4cbbbec2f34b1b8a974e30d9da8774e059e653764869f751ed31c5ababa1933 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-faina-saofagaiana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f504d123c4c98927d00d8bc989eda54c3ea71c58d3c7dd46afcda8d10c35d60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofagfgdi-ugha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1de0d502679b3499c94e0e6360a91508eb2c014b8e4d12b069d7ed491f359d6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fs0boiuna-goaiaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28b2ebd12b5e5d4641ba71d8c84e8a1c3c55f662bce18008ec5214ee2b98ea6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avoafifa-fagiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cdc49e7446c3ac70f595c3921d63f69f373464305b2759ea29939fd6fdb2391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahnim-sati-adagoia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69dbe1b0087a1eb8931eb7ecef508563fb34d988c9f7032f7ce65da67e0b774a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haruni-poke113 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1327e71b2842c14a7943bc0f16eb7b0798fb80c684f79b45281992aadbbb6e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tugai-imi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb8b91e85173c7aaaafea871e9be21893bd189fcb63f8c0fefc3855bf06d2d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-faag-saigaagfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c36e98b431fc6a63dd62773afa46c5d2db77f541c3415a91f98f8e7f3cca2eec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiyaa-sutiayanu-gano (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69f1540ea448ec272233ac4f71b91fbb8bd459af36c3223e2f87ff19c6b9bd97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hakim-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d33966d625ae20fabba972f38805f3adfc6c9f4191b3e178d60f019c7e010142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaim-liamkiaanr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0026cc4fdec1390a91eb56fcbdd4ec749b8abced1befd4397fc50ce496331f30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminamh-abaaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5695ad094f28ddc909837d47313d99f7849fb2ddcaeab13f7c71736442da24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koko-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 052504e6dbb255bed00da650bb14612ca713af07982cf6c7c3e25db6a3a74976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-ngafa-naufgif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8a398e27c14fe387fa88eeec96aad162b3e5fa8e00149c70ed52a177a315517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-baf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0c22f64ded383065623310d4f3e4d02c36e2e5479f7b3c6f2c5684b9c36cbae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-favcavai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33464a6a6e13835ba408b42b90257f3cc0d1af1b4c11f997ce1fdc9946dd0bbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manuiais-botayad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72c0328ebe14766ee0836dd9ef3b6afc63bc4a4779813c31be65206a04e5a6a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...