MAL-2025-184221 Malicious code in modasiv-kuvu-bavoiiayabu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 635b0a7cf7c06b73711cbdda6c06dfdffb559c79770e54dbb462f7e3eb869885 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183688 Malicious code in manu-oi-gisisgo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 935558bf7fcba45b5e0f1ebfd079722900bc309adbc5580ac6495bf463d3991c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183367 Malicious code in lobac-ub-afdmafdu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 180075a6d520af100a1bea60a08b5a06cc2128a97fa0c2da36bb912b3980c8d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avg-ijimamff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfeff9554ee1d46baa7a204f6ee4a118d5fdf1a5d87e6ab41d091353c1839f4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-noti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde0f92653f32a9665859f81366c641dabd589620cd3746f09ca6e43856dbf73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kidt-aog-uvufaifaafiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ceb84cf02bf439536deb1e73e015951270ab0e9ec944b13192a938995d693e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggmatdnru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 573632d42ed22425fcbb1320544b205f57950153e42e2032d7afac363db066a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-sstrtf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52e9f3eee273f53d76ed1b73feef80d0e1dbfdcd31c6a3ae90c0e9629a614e2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gisisgo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 935558bf7fcba45b5e0f1ebfd079722900bc309adbc5580ac6495bf463d3991c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-fagiufaugafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0f0a9ed086873fc435188d942239033453e5eb56450ac1f281f89b17170d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacffgtea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9023978dde1a4cd111cb9747beeccef1da4c46a6a2c7c1144e49d1de55c2b21a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avg-ijimamf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64295790962abaccd5794535f5112d5202ecf18bc8c6de122aadd9c694870220 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lki-haji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b7f3e72a7686c18b0785f8a77d3edbd6f3de94e2136207ddd219904cce148e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avilo-civbusasoifaufoiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21489ac1734aea20a69c69d0ede7a6774b18cede006e7c2ad028c411e61d5b69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-uavcseqdayaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e32d60dc7e3ce9c6e2162695681c221e5995f73660632cea63d151bb73533b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-unga-agugagaruf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac1800bfc65827c72114ca14bad5dc8c997dde12b7e03a36b1a5c56d05187575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olims-nolu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 274d7755fba61fd245c22f0ac0d5de1e7970845ddf2304314c89c1ebb0bdbd71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuiga-alukza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae78f3017f1d48e680d47a29bb4fb6f3dbbe20742ee0b8aac53189fb838a44f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184107 Malicious code in mlokok-lki-hakumajiabusubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10042c9a7903e8a79c8546bf5c955bb030e12621f704fc796406151cc132eabb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185195 Malicious code in sonic-oihg-mov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f47928018fa75183df95ce01bbc975bd76116f6c00eae15241847b03ea6d87c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...