MAL-2025-184369 Malicious code in modiov-kihan-afmcauncxab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf2ce54743ad9f0510657689bcf11d6deed02e8d2e03dd6024b9ae4f1841716b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183437 Malicious code in lobac-ubb-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33bb10c043d993c1e246bda50b99cb06e07584d8b4bb77802db2fd07d966555c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uga-agidu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1d88b19217763923038dc546decc9847d225fc5bfdbe6a89ab9b3f8f478a9f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-ontcami-lapikamakusi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 233a1506dca63f961a0b57e648dcaa9d263b66bb029efe18b7548186743eb06a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oig-moifc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3dac68759470f86cfd7e18db67655ee0c654417bebe0d05db753ca982fe67a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggnru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09e3d1e42a8eb4465ea10961d1ed932987bed81cebbc6e13a1d3d18fe3952651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mok-luni-huojim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34c051e4ea120819935ae5ffca82ab84c416baf59ffc13ef7e2ed5c7af165608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atm-kujolioaknoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b44b2303aa44caedc3c259a2c5770f72e6bdc634a2fd66982b1091474d72e665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-jos-afafia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b50e29e8c15fcb58c4b7357e33a2b8c505d315332dfe617caff64ad7847084fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rfrttr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3a0647df2f9cb098e344f97eeda7f412f9a22a5678e0f46cd36c7ff164312da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiko-akuivavnaun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd336413e2470f743f7b2f537b7c27daeed990f73bbcf5f58f5614722940e443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofeki-afahinaugai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 202f8b104a42e50a0b71b0a124efdd6327a934040798c44509c1ddf275dd589b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-jygwuuyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 797f3045ec0d8cbbae583cef28f21579e1f1c15f76676f66913cd39625a24078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifus-ugai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 795c7d62baed755790b8c5713002e578f19f0c2421918be6f3d8f7f78a5d38dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kag-tgvcb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b26d97015ba048546be0e9b34c8fd7d24f5fcf73c6c269ad507f13d5b52f638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-agig-iguqb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19b4d63a91eba702cbaaec630f966f677b2abeae5924f3822e908d04ad6458d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diug-damifoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4301501dff2d7b2c475494d391970a0a11802f200ac2462b371cd44e056ff18b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knilu-bofavaunuffain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f2873c4cdaa8c8342bed7ad7c0efd320a2f79c6eaae060da0e7e7dc30da80f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-alonaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31e8d53ae537993c387f00cc62f459ef093786e7c1e436ccba9b3da162bf5e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-cocak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59073bb3f419d2627e4367fc94741f4505c398412e1675e19adbae137e7c74d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...