MAL-2025-182223 Malicious code in gociy-ung-ugafugag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17491f29bb5e2a4c51ccb1ff4c0869794cff68ea26a1f22b377f0fd27d3919b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irhar-aadde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28b4e64fa88c0f2a682ab7e9f5109f2ddca96eccb8dfb9c44b0fe04244caffe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fangaiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f623daa056305bb38d461108028817cbcaf149825d7f3628267459ea6d8b5a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitouko-on-lakoikauak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c007b5aa0b16ad9b4310ef45a271b637fe00f53b76a0627759bfed02ea40d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indexa-fotadio-agv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcb4216539e13a09d1709a2e34829864a8b332e2f27999e4f77690dfd01ee9bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olimois-nolianu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6201f93fec0b8441f49dd599914c281782bb8ed08111847f6cda7124eeaf31de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avig-iayafuarfuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e1ccca409c3ed42278e2bb3e3a2b16d22336334d3b005848a518cbe4320c240 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bobacon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3592e0d1ff2dd2a7528acd95c5d2d35a70e221a6684afe9704ebf9e7f30b8159 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifush-ugofalif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da2ce94dbd3750bef2e20d54e2000f522c2a1646f7d26202e6348a5d1a17f7f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182171 Malicious code in gociay-ung-fugugaicagiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5557e429334ebffbd61a2f9be162cb4c79311caa44870f355fa7a42016a7d2fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-kubsiduzika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb2ee9b474ef56b2b57e4202f75f54df2add22513d910fc2d28206832193e66e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irhar-aaeasdeadeasdee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81a22daf8ba9e34415b5f0086e2fcea39a798167e67872cf4b13af28953f23ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gisisgo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 935558bf7fcba45b5e0f1ebfd079722900bc309adbc5580ac6495bf463d3991c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacffgteafsgredcadf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 516f537aceec6c23deab6bea2b65ef7cef2529420b1fcf10c1693854850e714d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ots-uyaidoagib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e762cd9d8c7694d79e9970d1697694085059e2df3bb8b57c31be5949b37ca5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oc-gua-vsjfahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e62869c92f484eec09e6f5a960f3fb7758eec535bea1acf55475d8b2222d7299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihon-afbaufcags (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8300b0451a3ccb3e98fca4509598c5bf40d664a3bc0bcb88901847a811a0154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imailok-ofe-aia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f25f125cfb7956f36ce92efb069fb7301a8b76e293cc63cae1a65733395ec3bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kulvu-baufav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cd798de802d3bd6d7062038e9aa282a26d956f3ed515e49edf6de8be6170f8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubg-abufe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 877c7ebeac9b2ed67eb57720b7a6add005171bc8d4bcf1aebf1b98185211b3eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...