MAL-2025-182323 Malicious code in imodiov-kofi-cuaucdocagl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17d552b55f57fb5eb2aa64d43d813ee1af4b8292ca848d158e1a3911b10848ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182737 Malicious code in inda-foji-giaiuasfia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64ea6a2ede519f82e9b0471ca2e2711db9b4285b58f40864fd2d4d8eec77c413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183780 Malicious code in manu-oyib-givakisssuisois (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6391015080a603349372a1e8c64701f06024b1043169c1b2dd0a102d995922d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184245 Malicious code in modiov-khan-afibanaivuaavihid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b95fa4a4551b0457d0f95b7567845d48ebc37a3a7ad396a9f37cd3b8e0e316b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182684 Malicious code in inda-fodja-g (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d497107c4e4a0ed32d4bc6fee44d2ada243a1951810350f8dbf2f7faf2f285b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185165 Malicious code in sonic-kuoig-timeseywaxa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeb52b6e652032cbbb6349e6cf449845e2422333be93a04188036f9936034b33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184828 Malicious code in poliaoz-aiksgsdfo-ahksgodan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b671caa2c6ecf037f0352ebfbff81fa0713fa2e4726f04dce1fdbaa23206fdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182697 Malicious code in inda-fodja-gifaiua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c430ab0014705c21b2a0f0e4eb3d6f847044423cd8856936201a9024a8371513 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182834 Malicious code in itale-adci-ggmatondanggangtengdytdbjgdbyru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22fcd87f5517538bddfa758dd09d393563c3a3acb37d4cc3fca2575e8f53bbad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oy-giososloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a97933721904ec7c747f794907b73b43493dfb6d0a983356693b1c7b650619b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ub-jafgfbaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df8f2989bd2842c5d5b5f595da4d2352d495c7eb45e6f68a2d53a7519b9e7d15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kubusimabika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19051483a74ad44fe0d4ec21ee61930e2f6fa348cd6f0ecb7ff82782dd56fac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifush-ugofalifufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86167b4c74de89854397ebea7ca70b7abf2e44ef1e4e59ff6cbfb7555b6f2b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-favefix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6765ce51b839f6ccbadf83426629081f21869aa35fa11fe83300e8d72324bf30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-niluvabint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e2ff2577f2cd4454280ea94f0d896788f9d1bebbbd0e7d8dfae3d922e18391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ijos-asanuoaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 566d94f63c8b668556facea60c9b7825ee0c6d523ec6deb6bf263e472b060b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bobacn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ea691e570dc70350a16621b044093daac76730427092574f20cd8d7cbd3366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dan-ujokuluia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9e38f53ee70091fbd7bb37b11038f4567f72bbef52ff173e8ac124b0f4e0221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ykhjyafizgantngkomtol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a77b5fba563c0d7a73e830613f8555700dece2d9653f2e6664299122cf297319 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufi-cuwabimagoloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb61de5585fb8ad783ac807737f3eb4f3e9f266272483e4c2158619904b0170c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...