MAL-2025-182000 Malicious code in flights-lutg-oikd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02929d3fc69117743419629d3d119dfe3d9daf397ce2ac4e96c4bda04ff9d48c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183501 Malicious code in lobac-uibg-abufavigaaute (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da3310245e6cca2c71dcc87b5a8dd2f841748ec97c9e04d235723afb1696d5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182417 Malicious code in imodiov-kufni-acumnacffgteafgrcaavfhaebfac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ef10b2ae19d8cb011b0b774a4c79d22c611e629cb1944746bc7bd1b457918a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183159 Malicious code in item-atm-kujoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6858429c39d692f93b472ac0b18d10ce9becd4589a086c363eb1b0f5cd655c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185134 Malicious code in sonic-kulig-tgacv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d05eaceeff54a24474b1ac0b324b1cdb70c2444eba0a31af22329648b3af0c87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183232 Malicious code in kisut-difg-diwfzc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39057840ca473fcd3aa8b1827298256bbff29a7705b078c374af26ffe650bb25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181764 Malicious code in avangi-olia-iuaimai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f331bd8019189c04c173b78779085982ec74a5f5acf2b63874fac534888d43e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183307 Malicious code in ksut-agg-ibifua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 771ba25adc0d410d27fc9f1fc406646e5a7b862637f2aa53d3c319617d310b47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185082 Malicious code in sonic-ks-ahagafujihuajfdha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7515f4973e2b5f7a5ad5a2c7a92cf6a13b48d9dbfcef24af4d630a7d795d4cbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifit-dabtauzai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f146f9d9b58c878ccd462a8ff4596ae93b48ac14e046474fe45627d807a2e52f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-avcafivaivuvagcd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fc5932a13ddfd41b94cc7000fd3f7c47c265ba7d302c8e2fb9a8831a2c273d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-alnaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ae3eaf7c599cd54d8f6ed569720a0093fe96e8a0e8252836cd007303838de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-klvu-ibaibamuvaavafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f684b879438cc51d3a1fdeb4710691d06f668dc9ea6f9191d7e47178670f475e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knilu-bofavaun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce816dc11a6f65eca315f11d11ea0aee7a6c6b651128141cd218469a1638001e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ks-fudviafyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9419477d9846ff4b3478f9382462018bf0729aa4c45a9e2770d8d7b71f444fa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-afmcauncxab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf2ce54743ad9f0510657689bcf11d6deed02e8d2e03dd6024b9ae4f1841716b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-jga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96aa4ed28a3086fdd1ed7bba3731d110c6da7e2c98a028e42935bbbebb8f2c08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd99ba84341a32284988018a964c0232147a0e6372574bca168e0b947c90896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-ahagafujiha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 845b292470eafc13b0b4b09fc30b37e4bdd96c5beb6974b69ff9f02a14dfec58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diug-dmoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2e762014156d39642fe5a8632d656f419885789ac8d48f0d30970bbfa1aadc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...