MAL-2025-184431 Malicious code in modiov-kin-af (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4da1729bbcae4812204c9e05ab0fc873e9b9ac7e5c370736614d174912f0cfa8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183126 Malicious code in item-atim-kubusbika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b645c7ff8627221bd8f64ce79eb3799d30830c211b6eb0926b88c4637a0e19d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181732 Malicious code in avang-oliutka-tabar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2031e817f01ebe858ff7ff64bee3bffd895539616b54b4819e7fa71d8c05aab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185030 Malicious code in sonic-kos-fgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e998631995062a60d2e032580764ee343236c02c28db9e5d94ca950e6bcecb1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofki-afuhnagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c93b6039be657a6d40e136618a079f01e2ffcc1acdcbdd70c3b93a7d8d23607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-ogoia-inulubami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4384d94567591c6f34d5bcca003e21228282eab22b6ee558170b144bcfe29d0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-omfi-cafacevavisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74239e377d229654546d40ba4e0ebc294e6047e21354bc1dbdf02c77a0a80d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-niluvabint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e2ff2577f2cd4454280ea94f0d896788f9d1bebbbd0e7d8dfae3d922e18391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irhar-aaeasdeadeasdeadeddaaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b58e72deb3f6d429a6be14ec8768b80f74939c3326ea5f894c573b9ebca06f16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-favefix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6765ce51b839f6ccbadf83426629081f21869aa35fa11fe83300e8d72324bf30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-avg-dagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f5740f7ee304d05f3c7ae55bb0318034fde2a9447ec74bd3b4939d5cd5e4c66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvog-dacutamaak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5771c90e2bf9e50a02a341f29528a89643f48383cdf213ab1618b82cb235f2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvog-d (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f20329a7481442226ecbb5a1adaee38f9ae516a4c3422812ddf3a2b966d29ecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-koig-tmoerocneca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104f07b568559f657a404e9834e3655907743e91802dc58d482f848fabe84160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oliobc-uyg-afauig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1722333d17f60f96d685e6d27faf9b2f6cd26ac33293fe600769ccb0e7a78e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-oli-abarani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0f70fce69a46031be57e7e73a2b625b94a1766923a4be41504ed1402a4e0f0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ug-agg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6b3040d937d433eba8f232cd5531f0cde46a9ee4bf8c4a21e069d3f18f5e18b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuis-kjt-garfuaavdfimas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf13173fc6d7dadf786993ec422acb0e36f4cfd4698b32450e3a10215babb388 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ks-aagfua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d506f46fed3277ec9ba5c870c301295b64129c454c4809223874a0087dc4577d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-dfg-difzcfcb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27325955e81bcd2b59d9ecc4ddde91ccdae86dc306eb25fe5c0e9e2015cc6d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...