MAL-2025-183001 Malicious code in itale-dci-rfrtr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65044a716cb24028f7ee25e91a9bd49960270a8f009ca9a2601fd0e35906a9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182067 Malicious code in flights-tuig-alumabiza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb5dc7072783301417022129a030e14ed1bc9940b43ff35c110aace712dcc986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181699 Malicious code in astam-ifut-dabualikaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47bee5b6b35e5e0bbad723ba53404f0b12c7d64784555b7f6b8a8ae2f80842f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociy-ng-gufaci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b60b4a291bb15fe3229d52ddc973bae5a475d527170763ca40d4607e6b03fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociy-ung-ugdsfis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3980a5867c7e3013a8dd26e30dd269e9b67f84ce88887d0216036f23dbceeb46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in one-kat-ibudafrufdaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 934419797569753c9203c663644205e454f5e77ec41c80f049096859528b0099 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irher-aeswasdweaddeassaeeaefedefredafafaadde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5252760cacde093abd6c20719c8d40ea80ef095edce87dc1a96a5bfea25f577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-klvu-babv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfbb1923f0ed588e229f486a648a8471adf42aa461132fefbd438f3c18cdd880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuidcmnag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27102aa3c6e7f7b73622f49a00b439ba7577374e3a5eb9e33213564de9fff72d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-guga-visagii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a56358422597c3576f2ffa8866a1327bace6785e19bf73d984bd35eb4b0485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-digoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0d6d21ae706e5023825f82b0fd7dcf63bf9103acc2f0cf46ed3367c71db264e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnuygi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45ab9e04ed2aa348bbbf0f7520ca34945958f08e00f17c01ee7857cb6731ac7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-sfdaawe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad93f6abaddc9e87014b22502c939ee35a36685ff8c81dd07b759da7c93a8e44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarage-olios-noilagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c375a46eb64142c279dd5ca7322503cba47d0a9ba479c9222ea5cb5f465d1132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociy-ng-ugafuafug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 533222ae155081c40bdd78be6e0b6c9adec0532261b333b9af4bff9fafbf7a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gisiasvugo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2dd7291241425b1a962c16841c92cd702e35fd7eb3ee1736f0efc00d4daaae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mugiy-ajoig-dajk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b111f6bec46e7e0db314254e05a5f654d56991f5f326f8f8aa18790ee824f3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avg-ijimaumfagaaugf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c70e33bb7e9a5383b3efee7b5bba811f3108f32f2b18d3fca8270cf71ed11427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodj-guof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1924a4ab3d63d7bd28ff10cf9ae13e187b1cc595b7ba27cb06d5144a0e61f562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irher-aeswasdweaddeassaeeaefededefredafafaadde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f017e763010ed3ccdb88ce8d4c500acf947e187a33a4d64b0b871075d0108c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...