MAL-2025-182047 Malicious code in flights-lutuiog-aloina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b5e6182848eac541f35b5b51fb86c941b024428aba1ca8006590f0f06c6670f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182461 Malicious code in imodiov-kufni-uavcseqaaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58f1e644b2ee581f6c33253618a58c48ad72b08f735d6e9a12ea9a6e9470b2f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182535 Malicious code in imuay-agig-igb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbf3dd89c19602b650642e62420f32e2cba8589e8cb4ef3f48e0ccfc34d85ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185282 Malicious code in tunis-kjt-gabisayyngf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40446f1b372e49077050690b73c28f90dadd74f86facffdc1efd9361d2fdea04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fusfog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df3526d8756b30184a19ff6014ac0972fcba170d20b7268869505b7e1ffa4372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dakaioba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45b5573713b25e7e3c4a743c81ef1024c0720a5612a8bf4cdac1b5e14ab8d857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-ogolia-inualubami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4e2e44e7f5cfbee56d522da08697fade27491250de94613f8f6bdc9625e4829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oifads-gssofait01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cb081fd0cc926b141dc5f70f49c79ed09886a019aacf2fd7d63268367167a1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185236 Malicious code in soniec-kat-fv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4ebb884956b73b3ceb7ee66bc29ad32b1737d30efc29611e724fafc04ffc0cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184937 Malicious code in sonic-kas-ahagafuji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb21f89fa5d9de34dd481ce083356a5718406984696261589c4b540e82ac2615 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-noy-gtogapo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3693dda8ac96299c2c24e25646fe9ebcce5e73cad9ced5cda6f576e6dfcccdf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-zpojozakika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b40fc5a5df47ac2954be50096c8936748333a57074a3243d699837e3c234fc11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kit-bogavoaawfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 529316016365cce39020d0962a12d41ee3036405a1a7b330d6fb70132026fe1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bobacuvolafin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d1d4768a3e0845bb0f0807740cdb6d4594db1befc93475749a64405cb1fe188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184924 Malicious code in sonic-kaos-fagiugafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aae51ff9080cc118ca57c131d010a8bc1048c8982b44c527176f07ded5d1bc56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-gua-visagoigojfahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3287b48b3f6ab20225cca321e3550b6557debb010f0cfcd053229d27c82db867 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182696 Malicious code in inda-fodja-gifaiu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1751fdbbbfbe50f2f844b68cd3389ec0ec744eb1cd84e3ad7d9a659e840cc785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-py-kaghe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e12e8f25cb264417a2f6e197f297d131def79fe512cce51fb1f23c5685b80d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-kugja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2a2d8266c50d2e8f083205e892964dc8898622033bc6e9204057210e068fdfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-bagut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef728acd4ca27829ea2181a225d764bc27da46e1a3eef564bbd77b624c996bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...