MAL-2025-182067 Malicious code in flights-tuig-alumabiza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb5dc7072783301417022129a030e14ed1bc9940b43ff35c110aace712dcc986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86c4a4fb4ac2450f31b2779213618f6ba7f375849857585d8b612d0ff7f9911c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185234 Malicious code in soniec-kat-favr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af7858c82682c285822b8bd8fea2bc14400481b3d649ff1853cbc2ed6d31befe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182181 Malicious code in gociay-ung-ugdsafs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c93cc64f04dd6ec1045a9682e75af7564a8b2406881bbfdc706b4ba535a8b30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184315 Malicious code in modiov-kifni-ufavcseqinuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 113e9ae876b6b3534e3d1de5440858be0fc9df83736c9088ff35defa30f66060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182898 Malicious code in itale-adci-gnuygurgjkolujlnrti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d14839569a3d2195d8bc0ad8e993df1716f38de9293553d5efe89d0036bb796 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183612 Malicious code in lomi-ifush-ugof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 310f369ea5aa04ea5e29b3c117b109d835e0ebd81928d10619c294f2eeddde50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183151 Malicious code in item-atim-kujaubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a515105704b364390c847f65133cacfa3f2bcf38b7bf048deb2b0932d07ad753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilisiamo-civufaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65487dfd427ea060fc9401905ad0d0842e705c057ee9a75d134e6673b3bd7231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kilan-avamobn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2b1e429f77a11ea5a32b1060225f6a62b3daeda9776fb2b8cda453c55ab499 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fotdio-agov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a038ef5280f1baab03b009747ac2decea57881d7b7bbb08f6253ca3c666bd0e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutag-idobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f5242d905594609e724a02635ddc6807acb6235e372739931852fa8975ca634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184959 Malicious code in sonic-kat-iadagh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 970ce17e3ee4074fdeb15e394625ae5c9208cf2c5ce9f3c867102b4707623093 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-oni-lapikasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c9dcc56996340bcd7bb7650a7a82ad62e2d88a169d5014e6bb73d763e33f24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184842 Malicious code in poliaoz-alai-ava0ubu0ku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23e8c24e6157166762c93e9abf8d00423a21f73d462b1c4ff370e3091784b4da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184139 Malicious code in mlokok-lofki-afhugi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942adc79dc004d70587d33929b22c58cde880f20df88deda2c1753b1f2887fbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-doni-olodagivil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c531bb55c2a7605e0ac4e858c2e6118d4f0bd65d4aff6625b8ba83680ca2376 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1ceb1dc5c496f9ae53d179c45647d6e99ebf5d062e4180a3c320300983cf571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a26f0b320fd3ed877e7d1fb7cded89b6249f8c634e942e361f92fcbd023b37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1c07af633e0c3899745560e15fbce5ba8bfcc53abc46bc611bc55bce07cf720 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...