MAL-2025-184640 Malicious code in odasv-knu-bonijavuficuavaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f216b73fac6cd82d55b96cd17c8076c1b6851b772fce351dd58325b20937cadc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvog-daicutafamajauak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5acd829e75e901b6f8f922b904ad40548b3ca1db3099fb73ee329d28e46f4037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-difg-diguafuavaota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e621cc5518806235fe87c084e6d740b36a8f6e71c6543c3bc535afec0adeb157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ks-ahagafujihuajdha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08fac6d2626a4c134e760aaae1c7023e5b34fdd4ea59f0be010d6eec05ea22fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofeki-aai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb3e5dbc5200a7a3a0a84ce451b7b292de904f562fc3ec549780705c1da8c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-ani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 543ffac541187b4195636a6dccfb0b7d0925f3d1b8f6e2e44bcc51043373a31c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kaos-fagfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d96e7e46cf201f2af3ad308147dcc651e487f073b98e130848317e0732d395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilo-cvasm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0912c670f0d874651883742e3d4bddf7731e06dfbbc987e6275fcff763e940a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggmatodnru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 840d91dbac328559284f6498641d488f142b63a73b5581cbe6c51cef84875584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-foji-giasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f8adca6ee407fc8db6b84172904756a8eaa430086d65bcd5aec9dec3303d89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilo-cvaiu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eae5620eb6d3f912780804378e364b84700989eccbbd349ec769af03e8a34e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-don-olikma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b98bd63ce5f1b309d6782183d3b539fe56d3f12ddb6441ecd48dc1a7de2c82a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-obis-biabla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d245e5bacd434e0274e5b846dc174614b9686d9e18becf0e5d35b513bfd0a2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-uga-agiduyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d236a74d4d3a305ce137ce1faa77798b104e1835dd65b61bedbf7278a42b2e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e998631995062a60d2e032580764ee343236c02c28db9e5d94ca950e6bcecb1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuidcavuaommnodag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6526445c66a44a004f5483383e84c7836ca55fb6dfa862aad544861c0b325604 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182619 Malicious code in imugiay-ajvog-daicutafamajauak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5acd829e75e901b6f8f922b904ad40548b3ca1db3099fb73ee329d28e46f4037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182407 Malicious code in imodiov-kufni-acumna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ab90537b0dadb0f33ac6ac45e852469b1e9881ce0dcdefd6604f2ae7f8ad1ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185080 Malicious code in sonic-ks-ahagafujihuajafdha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9af57ef0c045cd51aecfae13fae526fe3c034fd0b65a3349b9737858a2e1846f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183870 Malicious code in masv-ilmo-cb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ff4ce23199c1c4dc73fcdf6c53631fac94ae693b26976a71f615ea23f31562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...