MAL-2025-184134 Malicious code in mlokok-lofki-afahiukuanaugai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c750ffe930e8a93e3df443348779f21b95fa3fdc0f2efc0675327c9f6f2a3797 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183048 Malicious code in itale-dci-sywfsetef (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 582bf997dabe34de522276f541e5fde87d4f56c77bc71d2ba564e063134c2415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-faga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 839911df5eee7c783c483105bb63bae889a776bb393bcf77c80e808af55216cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-uavcseqdayaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e32d60dc7e3ce9c6e2162695681c221e5995f73660632cea63d151bb73533b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofeaki-ak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b55cf4296f17a024700d1f446ba4e41a33842e49ce832a6bede0b1b0c1c25661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kt-gahuvfadduuufafadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9005d276999a54943b56cc28905f297da58614173a5d24f7b812be5a0c83bc44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnyagibhghygdfbdyyui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd7365c375f9f0f739f25d47e5a5d4e4e6e971a5016d82ddae22958cc379c4b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oib-gis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ddc6c65dee1b85a3729add344226cb2ddad682833ec29d7b4c092844ef57bde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oib-givakisasuois (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2a154d42cdcdc9158ed06726425a9f9775b6a6a0b71daa05c67822b57a06a6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-uhfadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2356d9e56fb37f149f3502ff33c5c161fdbb221002b2d692a770a3dfe1b0dcf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mugiy-ajoig-daicutaaajk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddab30a7814fa4518f311d92d0cab99674df9ce469a2ca5547cf7b4ab8295660 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kag-tgvb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 248eed230e4efc313942713dd46334818cd9837d4ed782c4be3bdd5dc1694b46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-don-olialobsna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fd0662c7ba7a81e8fa16d3395b5a70d5a708fa22f8bce40eb6ba5ae95858677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-alaka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61154565a7182ddfb120ff66de88ca3b80a2af092e315f3961a3c95b2586bd19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-cocakm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 136f2f349c6e998a3bc5248038384d138ba5a11999bc95c2876c969c864bfac4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ykhjyafizgantengkomtol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ddd306159ff4d54ee1564f11cc3223f782492fada0659ee42df6c9fb8f0a2ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubg-afdmafdaeu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f221ae645da73c92a9e5e22c86e9075b36901801ef0fc4ac1e9bbddb9063b9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kulig-tgviavue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87f022cfc2afc2867d438ccc02ca526565fc10b8e9f57d7a6059ad12b5c68410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ubg-atag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5093adcd512b066dc9b1a6b6ff139c73eaee5a43aa7e6375b9f3e8e24b2d37d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-uhitagfadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd7a21e3cf834b27d979c4f89f582df61a601289eee7286ad9357c41eb6edafc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...