MAL-2025-183876 Malicious code in masv-ilmo-civa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8f5184a8fbf05d3e4eddf6186271a0e3601c32717b6f71138de06fe5a1481fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183958 Malicious code in mitaukailok-don-olikasia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea0af897ba4546f1f02c05f2ad5184ff49c5bf4d87a7dad3fd2a39916bfceaff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183314 Malicious code in libc-ubg-atafuifcafaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29fa8a0c6c7b2a84132d5ea3eda7a7c8f31f424d7e49340a50b21a558871ab79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182660 Malicious code in imugiay-avg-dudafigai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286d228974d7a44e709bdc285b6d30160be951c7a32cfa8af83ad42f3386d7fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181800 Malicious code in avangs-olim-anami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc86d8fbcd6b6ad9c894abfa5c9a4b2bdaaf1a2d6053fb18fbe6db10dc326bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dinugoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be619c47b9f41fb4c0bb2cc9333a144554133c5219baddd78dd4f1c38e01d0ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksdfo-alf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c606324ba822c2d1dc6826547cb9b8ed292cd514352ec37db1fd5c609e507b5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuiog-aloina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b5e6182848eac541f35b5b51fb86c941b024428aba1ca8006590f0f06c6670f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ijos-aaaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f73621e614fb3c63feaf4177bc8ae9890f8b437d21bae59b357ea17e0a5fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiudt-acavog-agiucua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 064b5deca2a007d0ce22206c5c59414c7c9caa5717acb9f02f9e7fe235a65c35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-guga- (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b065cec2a5b1113e9792ae85cb0380920eb18f8fab57ba6aecd45c20312d200c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-avg-daigajuj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f8d9bf88172011d98730eecc58b4fda1a51688622ca3edaffe2b4b62d5472b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-iliimo-civufaagvuafana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7001b58b8fa301c5fe403d1394b2afa0bda7bba69d26d406d93a00162155c357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-ung-fuguga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c787823c4bfaeec2fda5050cf52099194371dedb97bc58a56d3c7d9b4d89b1e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasv-kuu-bavobu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e9b95df812580bd4a2d179b9b99c05f242ae6163e2ce2dcde701d8ca2bc8a8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuloig-timeseyawxa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65c0026f6167303eec96c23fcb817313bf777020664bebda4d80bb21c801bcee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-afayor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e022bb123117c10c392337bf19e71f805fbcfe63a93c3957a2e416e8b9efb000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-avcafiaacd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2414612dab8fec89b06d3a71c4dddb8cfdbabc59274eec0caca34f8945a15bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kaos-fgahgfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2655f7ee67cc735b4e907ddf0c103746c219f5cc83449838e38f1de79ad6bf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggmatondnggangru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70b7c3bd65e3cd649ae60800ae0002f713a8f749539326c582b2f589693530d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...