MAL-2025-182006 Malicious code in flights-lutug-adibalonolo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d039f4b737e4b629158dd5b7f57189db9eebf3d2bbafbfe415b14222b18f117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183286 Malicious code in kiudt-acavog-agaicua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd2c32753b0e6c6e359ed6876d318de6f17f3448b22f3d8d8c44a1b98826a20e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184476 Malicious code in moki-luni-hujajim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f0b708668bbcd67226242cce8aae7b98cdf085f9110c96d705352ae9fe456c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184743 Malicious code in one-kat-fidulav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f29a595f5104b95d47fbc1f536347d80ea325d84984718623812365b0f0a666e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183729 Malicious code in manu-oifads-sfait01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08917e2c9f2625f2b08632ab6f7abea62a118f48998a57e37c56fdb43f72f0a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183300 Malicious code in kiudt-acog-fafifug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f029352f431dc278bdb6cf3173e7a5402f991dabd4bb22330db1fef957774ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182106 Malicious code in gocay-uga-agidugafiufyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fca51bcedfd9fefee721779b8af60437a83d0bfdaa900ad4daafee087818ae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181706 Malicious code in astam-ifut-dakaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b477251a01cb48bce6cfa14d3f9824e879ac3b6924d7f436a25ef19d8451520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-adisdfglonolo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55318b3222478a7542a44527df3819db32650456d094f9e653eb2f22ba28e596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olioms-nolibayi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b7358f02fdd1e3be680cf0861d22c48f80a2b801b6c93fbcebafc2ab8cfddcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kaos-fagiufgafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f700dd8afe8ac7eb70a6e257dea8a865e8e96c4a1899a07b7c462ffd339fdeb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiudt-acavog-fafiug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb4696066fb5855d6f6655e40f0709fb4c1c78987d1e577acd2701d7a3d8d0b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labieagyeyabbjpoka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cf05a3571343a5a73ca71e2145a3c77b117f6d0c6318e06fa8f8f4d1281ece3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knilu-bofavaunuffkain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd30d19b387df2d08e1e5dec12adb40628c31ddedb399e1a53b19123debea6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuwabimagaovoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6621712c2fd9d1858b2207627e8158a556fa1330ba0e203f22d0128dca09ff77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-ofi-cafacevavmolcabyca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ed81abfd2ccb471c8b0d052fcf1945e3f8fa4264c938dee03ef2f445e3d840a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifus-ugofaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 440f10f19aad762dbd731c4c7447d15f22b675f26868b529c9c326043054cb0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kat-iadavghg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7461e3603d5223c784ef531c4c305b27267424a7c75245b3f874d66d11e38ed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-ugaoyugixechafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac43a4aa6b5124cdeee09f2119f270a7b26e05b57391a50cb06f03560005d4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-hykaulag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ad5a181dc589aff2da74c85c73ec6699e767b0dfffe58e226ee7dc30dd61d9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...