MAL-2025-182092 Malicious code in gocay-guga-vii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48712e04e02936314b5cf39ced8900086678c89861904641f71828473917dee8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184495 Malicious code in moki-ni-hujikakum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 674161ff094bcfd0ad7a1f0d4f0659f574217ac7242bb1b16d96647954f26c55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyib-givakois (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 840129bdc08de01e716f3f7fa1165711d4d0466c6707ba526ec41127efe3eeba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-ugaoyugixafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36d1db462f9c42ed7b43321830fa159f3d4ee6d976f18eb6ce86ad6a2537f8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tnadeaxav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2c2a114c5b200cc356c8e268c640d22ee5c5bd25c7e8eabdc30dc31c5397790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rsgusytduet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba486481c94ae67075ed34706194b26c35d4116cad8bc7dcdc71bce98a20f482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-doni-olialba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5088ebe7b4db673af5242ec6431026f3e69b8bf762f0521a5a6cdc2df0041fc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-ai-avuhusiaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f6455840f2464ef30d292a58254401350d08748a1bd05c8670ca3b70c9d4fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufi-cuwabimagovoloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51f707d710bc75b7a1a5eb2286b04dc1bf7446d7cee1d512c789c88e113aaa63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-oy-giossisi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8da78aea58ec22d8ef0e2a79c63c6b333f98c79c5588c3d378f8ea4dcaaa0a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ots-uyaidoagibajb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10521ebbc7546da459671f9ffd1c8a10b821eb20ff49cdd51e8ed5d36ea5ba88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-oka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12ca49ccfef66e849e8e8b80b9658b092468a630b9bb4fae0c1650e25c769b5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fus-ugaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44e0774f84f0aa9e800f645e71228509805731df7f7b343e7a4b72fa8f7de89e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uinga-uuggaucfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b1d6d301b19e3831792a0177984fc801fa47754d9d7df51ceda15ce20993cdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fangusuiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e410b3470f44d7bbb1add945a9e8fa06785b42e6f7cc8342cd8238306821e257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-alonalia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 071d5873f87421804115b4fc4009dc6edb7c0f2473984e83aa7f1185676a2824 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutg-ildgauma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2756271b6334628803d639e9ff43ec25927fa3d15b082257d1081eda9b3811d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-avg-dniemnf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8e8b1658f7d7c1024f68fbcad6c10e0883d2b83bd3893f728d8ad70b270db2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaz-ala-yulabku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b275adef58f80c45be06888f60dee89b695fc74d55afa7649b8d5bc34276f884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilo-cvaginnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80a3e51009a491f31640b42f2d972a0dceaa0384013efb1c032b08a763e37ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...