MAL-2025-181829 Malicious code in avangs-olioms-nolibayi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b7358f02fdd1e3be680cf0861d22c48f80a2b801b6c93fbcebafc2ab8cfddcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184115 Malicious code in mlokok-lofeaki-aki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d67e223c5617163ea4709c518ba42d6b99413519a3ab0dfa100d67ef556c381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184313 Malicious code in modiov-kifni-ufavcseqinsdxuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bc18e7173e5bbd3f96650bb4082c8c80f814aac4a81fecdc850481ac98edcb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuloig-tgviavuexe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae4704499b268df01d82e8e5775ebb598190127f353797d4dcb74fb3757c234c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uga-agidugaifyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feb2344d8a0b6a0ed2196e8356ef576d4daf84c1c180d8190ff48bad216fabd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-akontolbapakmuuloltrjyfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdad8be8884202dbffa1a53b878be473531d6178a4ea8cee608e9731596dcbb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gisag1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cc4d976ee460edc0c24cb0457c265d4f92a6a4dea2174602a6e47f14d259c9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uinaga-ugugfagafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d06825377dd92db306c7fb01c9454d7ed804e57aa234d4698409bd54513e256 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifus-ugaii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35bc6993cd6581dfd84e34e081b9dd53e7a03d4e57bae416504de294b67fff8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-jos-afisigafifaafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0461462cc718f1b6b5ca53af4a9511e0552961d93cdda85ba4ad4389b966a835 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-uyaigbajb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8b4a74bac04bd9991d4ac0af35f185768ef8be936d94a5dbe9c888a503276c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kt-gahuvfaduffadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee0d875b04d0a50b3e48ed7d8a366fd8b8c4a8addc70d46dc92d190d3e106af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-noti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde0f92653f32a9665859f81366c641dabd589620cd3746f09ca6e43856dbf73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-avigu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9afd0dac512aa6c9093825f78170af00d187b8aaa174bd58ec09b741baa9168 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-bad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8c81613872572848368421dedd9aa078063e57d3dc615aa870d84cd6c1d75ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyib-givaksois (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e1f8871b1e8c54c224e6742eae3abfb9a431ced856ffc104eded2a144108f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifuit-dakiula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a4399cbf8d221b7b77c4a0ac0c8afd5ace67480f809ce302dfd87ee744126b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnegc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 579366c5918e9923ce0346b248cdebec828f3009120a2466090004c41c728515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-yg-uti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad297d01c85dcf88cf00d8a2120c0e31a17046e1d1c36088b184406c11ae8d8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rfsfrgdrget (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16500d145160e8a515ad7d3a465bcaf4fca3bca1eac2d19ce78adc2a3ae688c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...