MAL-2025-183806 Malicious code in masolv-avlo-ciov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4be94b058461bb5172b41bb9e6abec86b0271affb184c97fb4dff611d957e36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184987 Malicious code in sonic-kig-tifuacav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52561131aa6cc60a8b7bf9326544b119ffe36b9a59a961582d6ff5d32c3e7069 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185337 Malicious code in unise-kit-bogavi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df1e9f7fe755e50439044873fa2790218cc859a9f306ab853f68105f2350652c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181672 Malicious code in astam-ift-digoksla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9523178dde35ebeaeaa5aaa7ee9e0adb1d8c89b76d8f0e7564d69b4800c0bb40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185304 Malicious code in tunis-kt-gabisagf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a038f6b79b997d6bf927071b14ee28bdaf770b328cbcd8cf23dc0acf0aa815d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181648 Malicious code in astam-ift-dabbamikk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30425507d63b2c919911edd9e4d89b90b6fd17aea4691f53b963b317f6510c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184756 Malicious code in one-kat-ibufadaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 124cd0277d86d0ed84dbd873174bef02275d8949088bf4b58ef5cca233dac20f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183284 Malicious code in kiudt-acavog-afiug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fe72371b948601cd9c2b357ac2afe793bc2833b2fd484c5f6cacf66092f1f53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182499 Malicious code in imodiov-omfi-cafacevavia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fff3b1150963f99b41881dab3b23a6e253f526fd969dcaca0ee67b6331e1cad2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181841 Malicious code in avangs-olioms-nolisfsdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a756e6f297bc8738ecc787a94b85658e732550d12d1bcd2b9ceff95ab95dd52b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182206 Malicious code in gociy-ng-gufaguaguaci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81abfb7e9bdee0d24cd2137f6afb9a43644bff9f2bf4588bb03ec11f8a7956f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183598 Malicious code in lomi-ifus-ugofalia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e49f85980110fcabf1d130f5057ea19c66934c1cbcf05a3dc59c95fd1ec28d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182530 Malicious code in imuay-agg-iguqakuuidb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57192c2c8c762f413afc436b09c629ecd9e878d8dcf01e8d256263fb4929e1f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182656 Malicious code in imugiay-avg-dudafgacvsigai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 344079ac5b32958f33aa06c802681bb7db93330a36216e182eda392e3c294866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183807 Malicious code in masolv-avlo-civbsasoifaufoiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bb99634aa3d7b67f10f1c154282f2e218fe853444fdfe88d5ccee9cef86688b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 954eb5693ed6fcebb892bcb13a39ac2e1db4b7594e0f2f354e5e065b6f659f8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/jorelat15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 206b5759fd7fd44d988e83b1780ba9079ba2efc46620938db780bffb752c202e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b24d9c1fb43b93059d24ad0598bc636e7b55ca4614303cd93a78edb37f0da9c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4642f9fda8b5e9d61b55a0c4b891e0547c4e0173eb462ca26f5883ff293cbb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0e10175d639562bb303a4b140cfcf11dd6657ee0442c1665bc728c1a57a03e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...