MAL-2025-184270 Malicious code in modiov-khan-avcafivaivuvagfavacd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 955ca1801c8ac5b7aa33c3cf1cb37f6426721a5650a691244eb35f23ddf73277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184878 Malicious code in sonic-ijos-afafioah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fad0db5d320e176329cd15727176e57938087a605365c21efaca1fb49485c89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184990 Malicious code in sonic-kig-tifuacfifav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbe0bbb195ffa351c64f94db5aec0c7525c412734d96ee14834b612ea3fa2294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-kvu-ibuagoufavaucab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0ce6af5950a2d9ed820ad76779d24f3afdfb21176fe019b4bcd98cf17c90286 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-jab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975ceccb1ae753ee364dfbc705ca4d08f8da7d611142720a0f0c650b25596c6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodji-gigaiuasgsafofia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd3d4652515063149cfd3b6e35291589decee012232a9472700057d8010cfa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ug-ataffiaafaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b62be54686b21b2085b19a0d16dc70210440aaf601fe8798b2989879a00149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kin-afudsacz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bf13d5370cacfa092cc755016ea4f3a9209310fc0bceb6d8af02a93026cf7c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-gua-visagigojfahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 082c48a92d97c7e0b955dce7297fb2a4a7a633d356f892edd79e22600c057e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kubusaka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 430dd2043c196cf9b9c5e667c1b432fee5f1a68ff90fc2fdce9b8b030b633e40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvog-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de9d3b411b405cbdc96494d04303bb0f436b16780b9fd69b8aebdd06b23add41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuiog-adifagilo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e48fd337bf45cdc7ff3c5b1ddf8fc751ddf90028c1139f8cb664b135d66b200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggnru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09e3d1e42a8eb4465ea10961d1ed932987bed81cebbc6e13a1d3d18fe3952651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diug-danamifoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bb20452999aa36e5ef281feaab238e85e6deeb888fc707fa8047ecaadf8711a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-digokmiuaanla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 578292431351e4fd867d5a2d6f948960e6b88b66634e58f04b7fa2d9c1940e23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ub-jafgbf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbb7989cada614be82f6fa1fb4b9e9a6ed5292183d3e61107b51503a1737907e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kiuu-bofan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13f712e56ebc6f5abd58b080808606b530c790dcce403d19b6b941e60744b09c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avilo-civbusasoufoiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cd1ee749f4c8ed7d4d32e4766d4130209d8114a3fa45d5554922d80372ce581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tnadeaqcav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90b6e70cabb2d8082fbf7fc8061d42a1e29a9ac8c4f560d2ff420c730aa520e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-guga-visi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a1f20bd9cb0bc58e595f39c6399bedb6b92035d94ffa79e7a77d6889d61b1b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...