MAL-2025-182116 Malicious code in gocay-uga-viguai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 351d5fe1e7b8d21f66d8c2e9aafc40baebf223fd2ea16600efab09998cc92e95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183778 Malicious code in manu-oyib-givakisassuisois (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1e79c92737e4dffb2ec8076eb854664572d8614bae7fe30a2f04cadaf7dd5ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183002 Malicious code in itale-dci-rfrtt4ytr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a49cc91f86cc723ac32e3cf55759ef3411474fefe682f44b95075a948a7bc5de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182924 Malicious code in itale-adci-hykaulagg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baac91dd7e0f3db1d19545a00223bde0808f881da492954b51023d6de129f7ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181736 Malicious code in avangi-holai-inulmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00789d98302d2d8003387a1c40cc86abe489a77fbfb7cade5372515c42f7d8fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182266 Malicious code in hitale-irher-aeswadwadsafeafaadde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5389f043271175691ba6f2b0ffefe6bd6dfccf30b7de605e138497e9565df311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184189 Malicious code in modaiv-kvu-ibuagoufavyauacab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a363b2840910566d5e3498bd6aa7866a1034d985bd1e51889854211319fcec3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184364 Malicious code in modiov-kihan-afmc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45d0d218448601c52bf26510411314fabbb76906341d8a3544e456eaa1f14fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184246 Malicious code in modiov-khan-afibanaivuavihid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c45a630b9711d98580e03bd3f2471fdbbe0c2077000fc75d466f4b40680bc4a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184411 Malicious code in modiov-kihon-afbaufcaducxgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14b0950623a6907d9803e1d922ddf84f13fb886cb8470d004ee1bd00a1264387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185011 Malicious code in sonic-koig-tmoca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9120dcc41dafaf7ce6084ce003f1117a20fdd8c36bf6893787b6dbd6c59d7ca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufi-cocakmai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ad884591898c4a41f26169c48a3461ee27d2162d7e30179295f23422decc966 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ykhjyafiznol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 743ab8fb33ce6d8646d879489f3e742536d234239105d42b45dcb0f6582f942f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ug-agufxagidug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdce5b6e0a8fbaebbc7c54c027f7c9c3ed9f5dc91a3ff6d122e28f5ac5c07a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilo-civasm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 378fe054beefc13793ba277464b9204b5a1d12c9bdbd25806ba6e44c346992a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-ontcami-lamokoin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6de3ad612f0e472e14645f30fcb46ed3a27275d5b710f9f74911154d317d923 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutg-obolavuhiaduli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1799054ab2db9792435aa5fc035a6817ab2a09a834b2e3b3f2dd1578ff1468c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bonijavufcacvf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 228de940dc4064ee4dcdea3ed4d3aeace7e3d6fe1ef1553c7fc440c465e7bbc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-diakavag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 682475149d29ff69e2252eead8f2bcdc841a158958450ff54c71864c2ede0bfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-gisgimsof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6e1185fa185bdd00bc81dd15963970cb33e2460529f2ec25bdc244bbd2f40ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...