MAL-2025-180399 Malicious code in teate-thy-sonic-fufsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8688b516ee4bef334f896aeba64d57c449e1e8b7e7da449dd3395e72beffe8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174774 Malicious code in hokage-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76904493617489a581b85d16f79c848dc3e8589897d9aecb6fe10846e0c96d3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanah-fia-pafasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02ba3f0cf85371a93ebb39bf9e079a25e2453cd0c3128861a89a58705a5cabc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koko-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dccf2e5b7cdabb75311e140b32617df533ec3a06199860b7b0a96251f32b0237 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joee-bau-imu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ff293e25cf9528267a75da4d9138ce2a9751e05a3f7a5a5ac39dd130cacec67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179088 Malicious code in thambi-terd-vs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb642e3de0c4ffeac07d047b341b46933e801716caff6076729938a00184b17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173886 Malicious code in diva-bani-imbaabmo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecb95e4ded4283d2f8997445fece4f2c8d9b4d19ebd978c8d04957163aa0a34e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179086 Malicious code in thambi-retf-rsest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1499ab999d121e06c290e83d86d4741493100f39d47ae616deb479d9dcc3d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173967 Malicious code in diva-tuai-inj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40416b778b3a2fd88171e779ea85f66c500d9c210126954fd6f9420be63c6c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175384 Malicious code in kapvino-somagogamoi-ugafahagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ced58545f860ed06451235d66f6d74f73fd6d2148e390066f59176fd31eff54b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158748 Malicious code in lookingan-namala37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fc75f2867eee5906bee7edfa531b2419135acc51ca84de7dbd6d22ed4798ec5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156886 Malicious code in irashi-21-re2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f10798ca54546bde1805c7566ff214c575d1b5a13fc2d3154f73b32d16f7167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22ca68753b85ae51f10a18b0f99a7e06f2d584c8b400eade2d7113dfc8c05c65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioalgo-kilp-akilanuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0734ad23ac7d2c8cd67c6c231f8b273a605c8fd59038395b1391094a7f1db1b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losit-bisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d2dd5c615da01e59def8e98202b22fbf354a45b30163d952be8dae2a2f3c7e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abyikula-nibli-luyipa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf3f4c986ceadd686ca4e4e28702bbf7e398d61c57f46a747c8a66ee7e623505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namada-kasito-minpori (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 255c585d7b9c89e418211f9c8058dce7e2a5a1e9072ebf7fcc9d7f0a08b645e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-agaofkafsf-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8abbfa987456f57c8c87facc77fc6b51fbcede5fde071a5542a25006f88def71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ramadan-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 117fb027bffaa819dafc35b91d55ca501f83d570a3e09220cfdf764918644584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ewa-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1649540998390e9eef7f2270c632437c1953e00b0bbd91c122090fe7ee26e42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...