MAL-2025-183098 Malicious code in item-ati-kubusisiduzika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3610d3526e38b6e078667172755e93660ec292d124f1cb67d082f4ffaa28a3ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184563 Malicious code in oc-gua-vsjfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c8dc7b6633a1c34fcc3cdd0dc777af65caabb3193645db070f9efc96620628c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184729 Malicious code in oloc-yg-uhitafdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd93626aa813d674e1daa9cdc892a0a31b6dcbd161c34d30954eddce253abd8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185038 Malicious code in sonic-kos-fusiaffadog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b3b7104f8420cfe2541e7b9cc03b086b35e52e535eadbd967cd57f0634fd9dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185192 Malicious code in sonic-oihg-mopigafc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1aced286bc188ec0bfc18d8e9c3df582b3f3516a95e295e015905e813d01dbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181733 Malicious code in avangi-hola-inmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9293db301410cac76adcf7162426dc1658a250b23d728aa052716c95709f28e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184131 Malicious code in mlokok-lofeki-akiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beec1e2cabd735ac524a717139bd2699a090ebea49b13f00397149cb53b814ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociy-ng-gufaguaguaci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81abfb7e9bdee0d24cd2137f6afb9a43644bff9f2bf4588bb03ec11f8a7956f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuauscdocavgmigl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34e0b8b17873a387f3534b8094054301702beb6a2716c4791e6ba8e4d48034a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unise-kit-bograttipda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8992c24471b013c309218af3a24dda0509345d27707497ca3d7302c37e89045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-ugoofii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff5e6bf5f4ee14a4b56e1e81d4d42021561fa374d57c552f0cfc0a5d1c10661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dakiula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70c08539c656e48f41aa617390ac7d689069f420dfb2ad72415983f5af83cee9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-don-olikiakibuamua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36199eb65da9765028c00486e61b1573c173b15c511423bb31899a50e5242fed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mok-luni-huojakiavuggijim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bebae8d231bdab2d563d6ecc7ab40bbb8c42b5379279479fd96303d266e411f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fis-fakiugabas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d8ced8477ad96bccf986313bc37c6914b558d9c6b9adaef7bacb48942e2f16b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olobc-uyg-ughi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b3016f938426d39f973185c470108bb850a3e816a7b67dde3fb905ce1158107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-koig-timexa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e75de2b7f8dd962910f449e5918ba9947f6d7e8c42fcb1ba9b3e0f00593c276a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuis-kjt-garfuafafawkvdyfimas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5008f9506a84ba8196515389256f0b3037df23d0a8564104c84ede534009a80d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kian-avcaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e7dcae918ceedd2393d86597d1eb7b34c627b289e772658069e48ef97cfcbb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avlo-cov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07211e083ea0fae208cb99c6313b760d9d02f00008518212b4e0fd4e484da6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...