MAL-2025-182347 Malicious code in imodiov-kofi-cuug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8697849eca8455df70040c6a83cfc9a1c04929b07ecb9b67f35038bf8911d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181700 Malicious code in astam-ifut-dabualiukabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e99d54fd0dea0aeb05820c33dce0b92dcc0cbc97257d93abc4b5291d368fced9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181839 Malicious code in avangs-olioms-nolisfasghdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b28a2f27add803d710b030611b1e4b08f5430c3a52839891532a9b83f8909f84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dikouhgoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84bd10dc966774ba0ec879a2d5d71d8eaebeccd4ae5586c0950bb9f9fdb3b395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutag-zilsdsdfsgauma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee722dd2c06d347a898820ddf689bc23d19751e208ebd9c6e5f8422242ccc9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-labioza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d45b61fb1b99c6cae867832be66e64e38f11220679f03b74b762937c8337097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oc-gua-vsjfahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e62869c92f484eec09e6f5a960f3fb7758eec535bea1acf55475d8b2222d7299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihon-afbaufcaducxags (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8c716ad011646d708f6b91fcf355f892e7a3cb7b63dc0c7dfff006ad663de11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiko-aku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efb57a3a2a4e1630bb3fcc1d4a46ddf52d5875953dba7cb6390f6cae304dc3b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilisiamo-ciuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b56724cc51ee708ff7f43c9733ec2657b0e429568ba455662d27df5220f12970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksgsdfo-alaon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 986924ecf45b25cba7211fbdc1933a996ff7c05fe04e19d330a5010460a95d43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gisiasvgo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1c70a84200963cd9ecb30d2292a445b4714fc0adf832918cf98ef8b9592c852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ubg-atafuifaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bcf8e0e046816fa25f9082714fcfca93fa1eb9365cb8d3a389c3c8fa2b76491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-ni-hujikakibaaum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 619f8b325e5c54a116a1760ae11b458f84baa320605fb3fb40305f8746be76bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gisosauaug1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15545e8d5c279098328c5665ed9abd626b70242df12c384d9c3868126557dbeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dn-olia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d7f98f447a8094dafe85d26bee1927cea6eef97222b21ebbb501faf0a279c5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-don-olialobsna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fd0662c7ba7a81e8fa16d3395b5a70d5a708fa22f8bce40eb6ba5ae95858677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kat-ih (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37bb9b4ee4a7047d3a50578fb0c813dc3e8af4487315de154804df6189c1488d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ab90537b0dadb0f33ac6ac45e852469b1e9881ce0dcdefd6604f2ae7f8ad1ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-daaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bac874ce8ed0ac0567c94f62f499987a4e165d0703aebb5ec4330686f4d0002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...