MAL-2025-183858 Malicious code in masv-ilisiamo-civuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 067637d6fe032b34ec3d509d726c48f179c94dd56febde03344266c93e3d09ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182389 Malicious code in imodiov-kufi-comoldi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb627e4a05f35829147acf72aba07e894f590905c3f211be815226c46fbb4d54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184060 Malicious code in mitook-oni-oldis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd35b1f8b7638dadd362c9b02d3f599dd973f82e933ae0619eb1e2f8a886c73f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183244 Malicious code in kisut-diufg-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58fecb4b11822d110242ddf7aae2a460b6d12b2075617d1699f7b53e6f4c2efd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182145 Malicious code in gociay-uinaga-ugu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b60fd7ef19b7ad19a499b6f31e5c6d303e8a579274c473324ef7d3ac0ba8d28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irhar-aaeasdeadeasdeadedf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4d15729b5e44715df37bd9d68987690a3e4c80b2a6698ef27ef580566e888bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-don-olialobsina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ebd5d145b696dadf2cc3c8754e55d90edbefdc7a34c35514e4bc5c7978c960f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uinga-uugucfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c9bef97a49c5762fdaaa911484abdc87dcc1b440273a56ca8bb7bbef95122d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-doa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f126d6719843ce56bf6225716575b12c18f0a6beaae334ba94807c8e954d51a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuoig-timesexa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1defef4ff8e5a745d48d7ece087d36ad1f21dbe727e8b3dfc8b264c2af40e61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-daika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3a08457090344e07fbede7d87df122e366571025387f66c1e07173dd3b80d6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unise-kiat-boida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b370dc549125c54caf3cbd9321f796dc83c73433f78c8d8e6f57124f0c4a896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kubusisaka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70b8195ab43af99c61517c2ab74601569401b97e453ea557aec190f34a7729c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flight-iloamatnag-ziumaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2df12a789088bfd9e43e004f6bc9206cb3c5bf74205582fd4aa8e4d5fd3399e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ots-uyaidoagb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03cb405ceb939860e23ca0a4385fd8f9fa1d47f7da88595ec831f982b6ab20b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fis-fakiugaubas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 570e595b44a7d66efaef6900ed2e7dfe1fa0828a10e4828b46263f1b829277f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lfki-hakumajiabusubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31f47abcc6f00e53b313223a472f4fb39d3866430cdf6b025cb66a611384d605 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-avcafivaivuvagacd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a2e737956a0f9a0388212ff8c9f670f04e8b2a09a1707703919856f6d888e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilo-cvsm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c4753507136809e70d169b09afca830c2ea1136b7cfe11c4b1863dce2b6e64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oig-tmoerocneauaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e750d62585919a24f07184257b851f20b1a9ad55a634e42a7cadae3c1bd19f40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...