MAL-2025-184269 Malicious code in modiov-khan-avcafivaivuvagcd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fc5932a13ddfd41b94cc7000fd3f7c47c265ba7d302c8e2fb9a8831a2c273d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185121 Malicious code in sonic-kulig-tgacdaoav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 146492dedd7afb176d7ed24b5783f7050fad94e941ec631adb2c68894f6d2360 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182474 Malicious code in imodiov-kugfi-cai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e3a840018ba438a3cf2cab6af1ac3287ca34a7bddf70009288efd5cf1a9f0f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181823 Malicious code in avangs-olims-nolnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6df6bd416530bc5f3969bc4fb9b432a4b670f5a4c0768ba514001808a617033 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182453 Malicious code in imodiov-kufni-c (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71ea972e1e4f3a4f1ada421e9c08f37bdf0ef96b780c4e0a0f1a4b70e9e1af1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183140 Malicious code in item-atim-kubuskuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ea70a458b569612e064a6229c713056dd5558289a5962ba08f9ad910f2cd6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184829 Malicious code in poliaoz-aiksgsdfo-ahksgsfsdsdn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e0eaca48188be8b4267bc851365428fb33f97eb1d63a967589df6fd02859db9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggpaeyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f832c741c9652d4d93d62b790a0ab1c39693ca6774af50818253821cf21aa0fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutag-obolavui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cc080d5e03d7dcb3fc63d724583c1fe339734b4aa3bc0c8053f20d9f673ecd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-agig-iyucauaugafg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec5110549c90735003ccf89029f171fe9c000e134c5167da507d77e55aa285b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kaos-fgahfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b73f8891f6d355d950c0ad110cd60617e7e8fbd7f0c60e489c0bbacc2eefea64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kulig-tgacoav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbdbc45584e7ea9f4ad817d8a84485291791cf61318a8da323dd938a94199fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-adio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72961222466a1fed7649e3d873db50ebd763959952762e8f564c9c1293d06773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-srtrt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06f872e197eecde6b663d8ebb54944c8340688b215a2842af02d926cecda5df2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-avcafivaivcd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 023c64acefe995d2f8caa73122bf613bd9105a6a9a34af48c6d3d556042fff8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kinu-bobac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8344e78f61193872306260e62e6648fabc0b82ca4615dd652d88424e0595c75f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-uibg-uhfaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eb9f53fd250b01f99b84fe957bd0216fb521e550c29f1c7c904c1d59b4ec716 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-daikila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb054a3059e3b12739b8c71925ef7a4a79afeb64b7cf42dc2a27bf6971d6d4e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olioms-nolisfasdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9099ad984076c218a195b5657b2edbc59e8e157ebcf9f6e023bb566f755526c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-ontcmi-lapiokaasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43c623cd4053aed39ad814e474df6f15755e279f28b88ea2841f08f1cbb88d06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...