MAL-2025-183872 Malicious code in masv-ilmo-ci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dfaede6687b0f280b7cd774b91015322b7d122215884907c2b0b8f7629626dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184528 Malicious code in mokok-lki-haj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e64c8edae9fff6c36a5caf69be345d34558a27deb515f4f1e97f87f058534465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184089 Malicious code in mlokok-lfki-hakubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18c5e4d3c8e086830cd334252573cd2720ac12da43eedb655403ff754a432535 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182121 Malicious code in gocay-uga-viguvuiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce3b7be3e3de6e17c48a9f4dd7b3c302d4f6c55a5f46f39fc5ee0c60605ae70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvog-daicutafamajauak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5acd829e75e901b6f8f922b904ad40548b3ca1db3099fb73ee329d28e46f4037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-difg-diguafuavaota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e621cc5518806235fe87c084e6d740b36a8f6e71c6543c3bc535afec0adeb157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ks-ahagafujihuajdha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08fac6d2626a4c134e760aaae1c7023e5b34fdd4ea59f0be010d6eec05ea22fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofeki-aai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb3e5dbc5200a7a3a0a84ce451b7b292de904f562fc3ec549780705c1da8c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-ani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 543ffac541187b4195636a6dccfb0b7d0925f3d1b8f6e2e44bcc51043373a31c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kaos-fagfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d96e7e46cf201f2af3ad308147dcc651e487f073b98e130848317e0732d395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilo-cvasm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0912c670f0d874651883742e3d4bddf7731e06dfbbc987e6275fcff763e940a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggmatodnru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 840d91dbac328559284f6498641d488f142b63a73b5581cbe6c51cef84875584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-foji-giasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f8adca6ee407fc8db6b84172904756a8eaa430086d65bcd5aec9dec3303d89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilo-cvaiu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eae5620eb6d3f912780804378e364b84700989eccbbd349ec769af03e8a34e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-don-olikma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b98bd63ce5f1b309d6782183d3b539fe56d3f12ddb6441ecd48dc1a7de2c82a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-obis-biabla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d245e5bacd434e0274e5b846dc174614b9686d9e18becf0e5d35b513bfd0a2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-uga-agiduyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d236a74d4d3a305ce137ce1faa77798b104e1835dd65b61bedbf7278a42b2e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e998631995062a60d2e032580764ee343236c02c28db9e5d94ca950e6bcecb1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuidcavuaommnodag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6526445c66a44a004f5483383e84c7836ca55fb6dfa862aad544861c0b325604 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182142 Malicious code in gociay-uinaga-agugruf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9344fc202585bf706b612c6f8d4ae7ac4e7fa2801f795f8402525fd5e40af512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...