MAL-2025-183235 Malicious code in kisut-difg-diwfzcfec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96ce8e7190d09d93ff0b29bf9e71f8bd1970bf432af9d236166513ec5cd66ff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kubusisasidzika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0883ce240189211ba8d107993a21e9553bbd372c5b986ce7a9f1b303bad240cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185131 Malicious code in sonic-kulig-tgacedcuadopav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dcde3f50a15add27a8e2cede88742122bc6e6201c6542abbefc8f1830b5f59b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183835 Malicious code in masolv-ilo-cvaginahu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff28b98af7ac7a673d80d5a2d5ec49dd7051c1c277ec7a387cd668081d21cd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ifut-duoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9eb033eee83203f5bac153347a544e260241493a8e2ed19ce21329be73c5d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184978 Malicious code in sonic-kg-tifuacfivffacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e704ba8eb5b2e34bda2716e2a689da0c4a649d623e06fd18b8a3dc634d66f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kian-avc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 796cd89360bdc0f721879daa60d63c05e1216b80a0ba098e36ee739dc784fc9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kubusu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aef8a978d0ab885eaa97886b9319fec4e450dce689300e7536a213638b61de6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182797 Malicious code in itale-adci-aknkonyunaymhedti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d38c13338fded806acd0d9e38e13050405a242271c145977cc3b8798539fa412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181781 Malicious code in avangi-oliuka-tamoaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52bd7b6c063bca1df642843f124538ef0a733f8e7022b16e4117664f748d51dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociy-ng-gufaci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b60b4a291bb15fe3229d52ddc973bae5a475d527170763ca40d4607e6b03fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutag-idobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f5242d905594609e724a02635ddc6807acb6235e372739931852fa8975ca634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 619a5e9e8df4bf5c66ecc3496a77e7bd050c0323485273bdcd08de09ee71be21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ub-afu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b743762e0d76c300c0271597409ff49b03980a80296c853323e93244839899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-noy-gtopo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2de0d6bf76286659f9c195be013b374834e4d9aee3ba39394c5ae74258d61493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-favr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af7858c82682c285822b8bd8fea2bc14400481b3d649ff1853cbc2ed6d31befe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kg-tifffaav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebce8ae7bf78b1c8351dda692279a6da7b6f9b751889430dab8cf158b97cacc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uinaga-ugu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b60fd7ef19b7ad19a499b6f31e5c6d303e8a579274c473324ef7d3ac0ba8d28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-danoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1fef1fd504755cc54dd947e0e692c717fcf43158cf3a9d18b2f34ea49d784c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodioj-agafajafiba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eeebb16745842fe5955a8d22693b0ef8b3e7a6abd86a7c441dc1553f652c554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...