MAL-2025-182907 Malicious code in itale-adci-gnyagibhghygdfhbfdydyhgui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7095bedacfb4d4c300592b3abfc4739809dbec65029a9677efc726cf7932ab29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183126 Malicious code in item-atim-kubusbika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b645c7ff8627221bd8f64ce79eb3799d30830c211b6eb0926b88c4637a0e19d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185142 Malicious code in sonic-kulig-tgviavuexe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f8a214ed9fc9c99901316e812ae9ed3bc9e72c7ce1bdc652d392df8024ca842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182286 Malicious code in imailok-ofe-lanaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4602e65ff466c48ea9eee6a1fcb03fc6b6557f27eec830d8211c165261da30a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uinga-ugugfgaucfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b16a48397ba402b51d239b43c9b80e4515e06b4e05c39e2da2672e02d31e02d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilo-civasavuium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0655f7cc1a1c1137db7d4e3591f720145f3ab4424b378abca43989fafc64219a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksgsdfo-aodan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62454152ece6ee630ad408a1401d91d2cacb31a4a195c7deba88d07f4b630347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lfki-hakumaubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 961a5e265cb5600c433747c48e907dd34c0bf3383f4b2afc18b5ca98a8d20c25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufi-comoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96a5f1ecc502ef5bd23f3d2464941d145dd43ab1c1758af213a85415fabe8b16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuauccag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a466bffd8133e32682388695e1abb04b2c678e2f0007fd1486314c72fa3fb8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olobc-uyg-ugoofifaduahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25336c1c188efad011f084e319b85211ec45c7cb7931478518cde7c44f9ebc3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kat-iaagh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d2ce76b37088f656e5141328d7c42473d26816333a9c6f0f136282fc0b5a4f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufbaceuiacfovadfjox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 694c27d1c363deb19c34fa78c7d9eff989c3d9fde6b55001aa02cd1b693486d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itam-ifut-duoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8d78901e6a1bf8c75882a7e8e0d26a67d7c693569c3897bbf776a753a57e510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofki-afuhnagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c93b6039be657a6d40e136618a079f01e2ffcc1acdcbdd70c3b93a7d8d23607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-ogoia-inulubami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4384d94567591c6f34d5bcca003e21228282eab22b6ee558170b144bcfe29d0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-omfi-cafacevavisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74239e377d229654546d40ba4e0ebc294e6047e21354bc1dbdf02c77a0a80d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-niluvabint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e2ff2577f2cd4454280ea94f0d896788f9d1bebbbd0e7d8dfae3d922e18391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irhar-aaeasdeadeasdeadeddaaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b58e72deb3f6d429a6be14ec8768b80f74939c3326ea5f894c573b9ebca06f16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-favefix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6765ce51b839f6ccbadf83426629081f21869aa35fa11fe83300e8d72324bf30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...