MAL-2025-181958 Malicious code in flights-inlutag-idsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a81d3762cd8db4f574437e3d530cf12aaefa09bb4e01362a8976355a8047a3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182715 Malicious code in inda-fodji-gigafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b6be30fbda6ac81bf93ec7242341aba4a30d795b5b784f5f87e6f417f1dcbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184055 Malicious code in mitokoik-oni-oladinps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 473caeaf2f72c4edd7b1a28416ad2a5628ca109929a1bb920e0db7263bd162ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183295 Malicious code in kiudt-acavog-fafikufug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27b2e5ab40d6f56099f89586242ead0dac8cd3dabdbccbdb9b4114610c773a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kujalahubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17c2aa7a537e9fde2af0de1d8320b6ee1f525d0e7709161fe106061a99a9ccd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofeki-afahigai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3418899397227f3c940bafeecaea65bd5090d5a2bb725f3194d5c796396fbfab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184665 Malicious code in oliobc-uyg-ugafabfiuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cd8befb1e7728f7adbf139220d7e39191ae906ca8822aabb95ea8bc8522333e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 072fd922e4d4dd49f3d66f95ae3c726918d2c4060dfed6195861579ef715a4eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gun9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cf7390d614ae3abed79bb62e34e694023ab8cd3c4ff71f6cd442b5018011610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58e335aa68ddf6da95022f7fdebadff7a7322ce357e05f381b2c8c4a73712418 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gun1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e39996ab245b744a18cc86ef786e37d389e5830144e272e9af07c90f6871a0ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a46d594f19f1f15acbaf19198e316745ddb1a0f18b65ca0dd920c8b7537a1def This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1851daefbecbc23f3bba9a063c72fab4d264e93ca6f007b84de56f07884fc96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cc55eb5e156cee9cfbf89d2bc3f479e45bc198b052b5286950f1b9fd40d68ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 557ee8b655875973beec5e003d61dac7bab16403f049157748ae56e3f8279561 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d4b0a1b5b7fd0152f065d078d7a699cad4e858c8dcfaba5bb42eda600fe4e7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5606ee6e395396c689c9556c4a8e5d0ad54ac4ab647b76ab5bff2f9edbfec32e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45938a824eccf18bc53e40458e9f7b6357818bc877f38e067b236b4c9f350fe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0ceeba3197d0587ff8baf6270a00bd489eda27c6119c10d5a8ac3d00932148 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/baong (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f507cbe1f75eabcfc98837682a818c498aeff00607d48da31f73d3d56f3f799b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...