MAL-2025-184665 Malicious code in oliobc-uyg-ugafabfiuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cd8befb1e7728f7adbf139220d7e39191ae906ca8822aabb95ea8bc8522333e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182601 Malicious code in imugay-avig-ijimamfuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6bcb0f7340ca7f987b39b8818988bdbeb6abe2d7fe5e51088124e3f8e3b6a96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185186 Malicious code in sonic-oihg-moc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae2d948035fa9ba20a3da22db0b03896f246d346e715ce2144ac85d2dc01021b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181903 Malicious code in avarag-obis-bidabla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63893b5c2dc03b3b9cca4ad46bbaf7b0b797fb878b8cff9509029f9f050e2d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182818 Malicious code in itale-adci-akontolbapakmuulolotrtjygfsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b6a190874caaf9ea38871049745a5fc31d98da7a0100d8546d3d3142691a27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183788 Malicious code in masokidt-avog-uucav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f15aaeb479511d07d953e0866cfff23dcaec220acb76f5722c1cbd4c3e2c452e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184217 Malicious code in modasiv-kuvu-baubav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9309a1d560fc912229f03fef73b0428b5ffcac2e083f23bc4d5a58209f801e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cc55eb5e156cee9cfbf89d2bc3f479e45bc198b052b5286950f1b9fd40d68ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d4b0a1b5b7fd0152f065d078d7a699cad4e858c8dcfaba5bb42eda600fe4e7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45938a824eccf18bc53e40458e9f7b6357818bc877f38e067b236b4c9f350fe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae1fe8e48acc441891d9359dbf5e4d834ee6f917cd01a62b99be4ec4c825001 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22986fe25d0992630dca0c0db346a7701b358e6c09362efb6f4123275849d93f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gntc_94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43b361b241a353cce33e3df6a9c52d2054202e85937c822b65f8b096a8f4e4db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d2629b933c76aef884e1a71e636e6e7e7a2037a0f8683cafaba6a987583b8bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 072fd922e4d4dd49f3d66f95ae3c726918d2c4060dfed6195861579ef715a4eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/baong (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f507cbe1f75eabcfc98837682a818c498aeff00607d48da31f73d3d56f3f799b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1851daefbecbc23f3bba9a063c72fab4d264e93ca6f007b84de56f07884fc96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/batu11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bbeed5eb8eb657446bfc327d377579ec412ac3e2969f75fac4b47432acc77d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gun9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cf7390d614ae3abed79bb62e34e694023ab8cd3c4ff71f6cd442b5018011610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fd5f2b5f0ed84ce72e37c976c0d9b0dfbedc5f64ed6890b498e203fd75474e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...