MAL-2025-185332 Malicious code in unise-kiat-boida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b370dc549125c54caf3cbd9321f796dc83c73433f78c8d8e6f57124f0c4a896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182748 Malicious code in inda-foji-gisagabuilan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7be9a828004e557fee23f6837edbf9d1a7c160352e4eef6395a386e6250a4c10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-obis-bidabla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63893b5c2dc03b3b9cca4ad46bbaf7b0b797fb878b8cff9509029f9f050e2d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-badadivucgafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eb4e0ca1d2312d9443fe207708edc002a34e7a509b8514a7e5a99e2f608c06f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-cocakm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 136f2f349c6e998a3bc5248038384d138ba5a11999bc95c2876c969c864bfac4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifit-dabtauzai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f146f9d9b58c878ccd462a8ff4596ae93b48ac14e046474fe45627d807a2e52f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-unga-fu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55cccce9c562e0787be13ef05abe15fc5c284143d486c64f21f87775e6999815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuig-alakanjitw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08d7f97074b17d7e43a3a09076231c1b7fd094cf18cad5ca2cb6ce1204b16abc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-oliuka-tamoaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52bd7b6c063bca1df642843f124538ef0a733f8e7022b16e4117664f748d51dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-ffav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd2109521f4cf1e2ef52d8a188b6a937204dd81dbfe307ee127f62e77c59a0df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofki-afuhianagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fffc18e7ec6285bb29c7408ed2134204af966c9df1782498a82c4bb1e113b838 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-diguafvoatav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cd6af9c27d269b27d9f175dbd508d14a4bb64ef38d342d2b5ef36a39a59d303 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fangiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d378327361be19f66459d3b835e3754921c128e643a95ac70522383204ad593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilimo-civufaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d4662fe9d06fcd84b06fa641c844cb59864d1936e8c7e5c93a0f31a80a85c68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rfsrggt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aac0fe45f34ddb2b0e1ace00c84c9aed4b3fdca0061aa93f2e6842ae96a0d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kulig-tgacedcuadopav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dcde3f50a15add27a8e2cede88742122bc6e6201c6542abbefc8f1830b5f59b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-faks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5e68bcc44723adb7e9098a53eed0317e6e6eed9dba9697e952fc1feb350f56e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oig-mopigafc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e2b1c040ebb9a953443d98531a63825e597bb324cedfed6b5b7b9e6d6d8d9e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-nofity-gami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae35ef0cdb412e48c5e641978ab4e67693914eee7f5d0c188f13b5ed87ad040f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tnadeaxwqcav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0faef3b152e4bb6e15502fa2da4c8c0368ef90810aa355abfb1c5b5d8260098f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...