MAL-2025-181943 Malicious code in flights-ilutg-idulabisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2562a4832701f72844948fd44e2d8d5479f11eee193da1b3f824315042d0372a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182569 Malicious code in imuay-avig-iyg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5c0d4f9694d7d6a19fa1bb1ec2f1ed97b2b73f3c6813e6a8ce6565440fa777d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182075 Malicious code in flights-tuiga-alukza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae78f3017f1d48e680d47a29bb4fb6f3dbbe20742ee0b8aac53189fb838a44f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olims-noliadsdsgsgnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc8e481f6b8b0934f1c677b2c9d50dd6fbcf5de84911f64064397d45b62531e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-omfi-cafacevavisvoetfamolca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 974a2bf8078dd88cbfb8496740c39bae19234f8bf10f0192a67dae04ce36d586 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184788 Malicious code in poliaoz-aiko-akuvan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bfc3e1b658f3adbd2a7b3c13162100ecbd0852d3063f9d1c3f604e48315b635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183202 Malicious code in kisut-dfg-difzcfeccb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 382bec0263840f93e0e354816c4d3795e61f6f6d122e5528fa4073b635876189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183368 Malicious code in lobac-ub-afdmau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76c35499c93079f889ae2c4310a22ff5bbbd30925393ce56cc3f7e5b6ad8a9ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-obios-bidabila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8de3f69fe6ea1156bfe28239c5880f3ff07e64927e34a3311d060496bf585665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183102 Malicious code in item-ati-labiomizaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14642c84ee23eedc4862e92c53d66288e02204231e85a0e88766f2b2f1eca8c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuiog-aloina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b5e6182848eac541f35b5b51fb86c941b024428aba1ca8006590f0f06c6670f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuwabimagaovoloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbe5992fdbdef545ff0ec148ac942b2a797d0e6bf648504d0fc6875baa7bacd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-uga-viguvfugudivai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7971b3e149a13b1b8a2add0cfb73afccc42e45718eef695f5e209d55f57bbd0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avig-if (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5692a93f7c8727c0f72cee1e3ca9c2a9c03af8c1ab0c173636c0ff6dfd2e300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-doni-olialoba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 467181e82b862b8c9a7b6b034bda9473abbc7c93d7ba2e21b659be07d8f1023a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvog-dacmak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86f2f5174a1e18987c4bd0b46a5ccfe94cb5268c3d82d05408cf09b5e53f498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kubusisaszika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ddc29fe5818f1a4968cf3306b4d41fd75b33f3386111bb7553e990aa217986f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-akif-daik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1120b885eaee7cdf728d006c409ead15e26e26a6b3680c6460813481e1461870 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-adfio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 788b2b1105ad14f51e61a532e89f46d3666518bc9ea1f8c014465c87b099b7fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gisgo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd66b31dd3f733afb9fb5868c5c66742f25f0d98a885538e9d8c6dce7498b322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...