MAL-2025-184616 Malicious code in odasv-knu-bobacuvoafin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c5f408701d2f1d73d1460b93efd4a84d23645f391b40e4b3f533102cc1feaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182428 Malicious code in imodiov-kufni-acumnacffgteafsgredc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71cae8692ba9ecb2cf7d738a854693cd7f3a1d153d0c79293435c6195cfff639 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184270 Malicious code in modiov-khan-avcafivaivuvagfavacd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 955ca1801c8ac5b7aa33c3cf1cb37f6426721a5650a691244eb35f23ddf73277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181648 Malicious code in astam-ift-dabbamikk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30425507d63b2c919911edd9e4d89b90b6fd17aea4691f53b963b317f6510c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183540 Malicious code in lomi-fis-fakugikatajb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6174d0f0c76b92b90dc7e0c320618babfa4dd6d80f23cd46d618810f54ce9898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-foji-gisagabuailan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3743809c2bce82ff4e88c4037a638396698490dd8248caaaacd112aef758d44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilisiamo-inafuuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a1d6c3e20c0554d4e0e6c7ee9c07c825c32d5f72ca0d40cc27b585ed82fd2e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-ai-avuhusiaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f6455840f2464ef30d292a58254401350d08748a1bd05c8670ca3b70c9d4fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociy-ung-ugf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1f7669b1c80b52101cc2ce59d5e9d6e7dda9bde619e2530bbabad3af9280072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kubusiaka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c744033640d46109a0afbdb85dd6ccb264d258e382920ffa9c4aca3c67882ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-ogoa-inubami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6677fd05f1f02aef027597bad7104a21a71120ef425e3b4ac390b5b869355f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifush-ugi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b67cf7f126eec1a1bd96bc9cce6467c60483f8f2cec6e435b522a7558f61fa3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuidcavuaomnodag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d76a3c13451bb868f4be75606bf02bb0379c97f834ad96ad380cff29c026b4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofeaki-akigi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eb8edb0fdeb428b54ba787b65f29aebc5805a20afa4464410ccda2dea40ab8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-ung-fuguga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c787823c4bfaeec2fda5050cf52099194371dedb97bc58a56d3c7d9b4d89b1e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-gioafisasiasloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 494632d0ed5d3b01f3bdecb128428ad7958add48a79bb3392d7a6b2e506f9d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufi-comoldecoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51aec9b1a89edf1d1cbf8b8a2b815da6add699ee7d3421213e006d0ef38edc3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182974 Malicious code in itale-dci-fsf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae498453cf0156dfff54a5f8e6dcb971c1d7e80cd1da6b4673a8550f4b7fbea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaz-ala-yulabku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b275adef58f80c45be06888f60dee89b695fc74d55afa7649b8d5bc34276f884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuauccag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a466bffd8133e32682388695e1abb04b2c678e2f0007fd1486314c72fa3fb8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...