MAL-2025-182067 Malicious code in flights-tuig-alumabiza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb5dc7072783301417022129a030e14ed1bc9940b43ff35c110aace712dcc986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181593 Malicious code in astam-akif-dalimunak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 614bd4bffb2dfee60047ea1585dff6b5d5a06f6ece161973e2c686c0f9d45523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184980 Malicious code in sonic-kg-tifuffacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2037bf464454f993c28b7464e5ff98cf9d6a142f8377c888fa46990c9032ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182149 Malicious code in gociay-uinaga-ugugfagafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d06825377dd92db306c7fb01c9454d7ed804e57aa234d4698409bd54513e256 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184574 Malicious code in odasv-kinu-bob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70727380c9d36bb18eb7df5ff50869aafc88c8ae4a8fb9991dee8a3df32e742e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-agig-iguqakuraduaidb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8fb69023a616a322df089364d56ff4484b961fbf68298da3e1a71ab468eb9c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-on-lakiuoaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 225b2353cea9215f68e8a667b46d8901d5e942d488fa78ea6a9a08a40fdd44a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-on-lakoikaunoaak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf133996059df362a09e94d06cced079080fc9aff62f8f0b422e8a6389d4dd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-doni-olodagil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfd375c33c7a72566d8d8dd8b4ed8f46ccc84c604e1c9968f93c5586f5e10a5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sone-kat-fidulgafucfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5ed920d76d51f12c4a0b545604f84380f8d1e40872b460f671f4ae1f93a6ca1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86c4a4fb4ac2450f31b2779213618f6ba7f375849857585d8b612d0ff7f9911c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labiagka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dbfa12931d9e3626cd150a2bdb1543474d5a714cfc2c009f9cf10414ee8c129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kiuu-bofafni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17f0b7466dcc79b06f8df59c8efd66a112372ebbc034e0507cb5feb69dcbf40c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-komfi-cafefgxadad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2de78052fbb626f3b7026bede0f9ecbd994c9a9e6264071f89403dd704309dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-foi-gis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 237f494c99674a0fd29b6b60e9a643faff7d5ba6e3713c1d5c74c1db49e5e28b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksd-al (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b473c8f7e3fac0d1b25e8f4d0266d6e738f50386e5b95f0277f79847ad2067e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irher-aeswasdweaddeassaeeaefededefredafafaadde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f017e763010ed3ccdb88ce8d4c500acf947e187a33a4d64b0b871075d0108c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitaukailok-don-olikoaisima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dba13c6a066c5e958594e2b947d0c474e3db37c7f3981a75b4b6083e9fd1dea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lki-hajiubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc9ebef270748f2b77bbc502d54254a7343627a2f3aced3c1b8b8b350174e77f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-avg-daiugadajuij (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c33be95a7c59e4bf89469a50eacc1cb34cacedd55f448b83554306515f5efcff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...