MAL-2025-183030 Malicious code in itale-dci-rsht (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9479dc56971a67f32000ef2b0aef2716615d64c660bff1dbf3efa901c0ddfb4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184081 Malicious code in mlokok-lfki-afhgbaagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2270d1fc70efbb61a2603d35f51c1bedad946421e494abf0e3cf89aeef81c29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182571 Malicious code in imugay-avg-daiugadajdfij (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1143227fa74c49258c9f6e6cd14407ad2176492233bfac808761cb6b336cfafe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184696 Malicious code in oloc-uyg-ugaoyugi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f6154af76a4afd246430d756fecabceebe3ae53c7e4b922aef36e1f56b51bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uga-agidugaifyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feb2344d8a0b6a0ed2196e8356ef576d4daf84c1c180d8190ff48bad216fabd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gisag1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cc4d976ee460edc0c24cb0457c265d4f92a6a4dea2174602a6e47f14d259c9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knilu-bofavauun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a3309b5d7f26279117e3a089fa59c22f2d7156785c1b47ec4296712a50db583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kt-gaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ba1a89680d2324f43456da2dc5016d085c0d23f3ac161791bd52e13d18147c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1ef4df8c7a985e4775362f559e989f2b519d0e15ef117c35b6d6396a3d52d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarage-olios-noilagagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 226390fb6c592430fcc361047431a5cd0ec4fedd17f4c02a690d89315dd79723 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitilok-don-olia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73934e7962713dec8d47e6def4c909b16708a6c397fd7face2a370680bff03e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-difg-diwfzcfecd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5da409756f9069ef60855e3e5f528102522eedc00bb6f6bde3f43b668233b8a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufavuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 974128d78b10ca7639e0b07a407e1b933b67d04d9d880560aefb3ea516179fde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oifads-gsisofait01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8360faab652e6b1eb0a0d9c1e216e90c743b46486f07d179154f38ae5bb46a72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-koig-tmoerocneamca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65edae69fc8e01d29e71c73921cf786e09494e6ced741ff03607b8f21bd6b506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggpyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f96473f976c621e187fb0f7b25e2f96e9deeaf957d0950906c032ebf0a33210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-faverufadix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44ec345c78072d294e5933d7af00ebfc69684a5ba7ef1be67645909fa895fa4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labkpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a50e0f6acbaebad9772f9f3834e3d5bf06bbb98f620f5e61fc908b655fd5b85b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in one-kat-idav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a646024d841c9ae435d0f3a04dc72292006f5590e1875ddbbdc80142ffa849bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diug-danuamifoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39af6c4f23e1f3b10ae3f5289105b9697af264f89d03de138efc4b6c2335930e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...