Malicious code in soniec-kat-icfafud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92919d5e1929192664be55c601ab141a80a687840ca4a64f07fdba7d26325496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuig-alumaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1dbd695f24783de2fcc9f8899a61f4edc96607ae326a810102cba7faa0fa00e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gsisi01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 790c2b8980087d8dee43a2e8b4c1a27bcad5c1def1f372e0e58ffc02e999b80f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-jfggafuayuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbcda6f04a74cdfe960e87440eea2052b93e49ecdf039de2001832cdd60a83e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kulig-tgviavue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87f022cfc2afc2867d438ccc02ca526565fc10b8e9f57d7a6059ad12b5c68410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gygyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16138e3fb04ccd0e146893046d97b791e0aceab121e1834fb8c74c9fb85a2a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avlo-cvoifaufoiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f33710b7af3f39c8934abe4d0b0a8188cde2b780a20726f15eff6f7b85d2e02f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rsgustduet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf2544e9734a5d4be31355237278167e1daec4bca54503875bff6fbfe3fed73d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184891 Malicious code in sonic-jos-aafia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf93ad103a765f619a5d787d008a6c1d3c171a33b553a2078e8f72439f43662b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185132 Malicious code in sonic-kulig-tgacoav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbdbc45584e7ea9f4ad817d8a84485291791cf61318a8da323dd938a94199fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labieagyeyabboka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23e943ddc4a4a28ba8c9644909a518ade17fa1c1d08d43ce49f1151347f40229 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacfgteagefac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487ce730e83660af79d2a7e0d28f22fa1ccf0dcdc7fef64a2142a5c74b6b52c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-duoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5267a3b47c206b3782dbc59c83f9b94b4bdf049b27becb26fb05727cd5de951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avlo-cobabasvov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 639db57e9e3fa8ecfaa94eb104ccdb6a9a4b7107babf26e75d174e68157bcab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-avig-iayafcf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cf4e85ce315a020994cb46349632bb486e19edf3f66dc8d7157848df78f4661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kidt-avog-uvufacav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eda547aeaff92ac189120aafe7673f4697af5e8917e9e742b85d5c7b0c08b824 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-oy-gistsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 580c2a19d202109998de5c16fd76146b3dd4f2bc3d42ecdeaf88ab9cbae66e93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-alai-ava0ubu0ku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23e8c24e6157166762c93e9abf8d00423a21f73d462b1c4ff370e3091784b4da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kt-gabaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0e8c737f8f7238738dd83db20c9a4de83b84dd17afcb0ec6c879b0f015e1686 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobic-gob-gvatuagfagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f493869c769f23ac07c56080dd6ae65fda964dc499a5e514f435595b8f59dd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...