MAL-2025-182583 Malicious code in imugay-avg-ijimaumfaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da350e4cd00f9ae3e1a80560d5277ca32bbd2381c9654305f1708d4d92687c5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183574 Malicious code in lomi-fus-ufisaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 450f81dbd2258c516538b0a6af2b93be8287836cab64a2f55812b0a8c0f8be7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-ung-ugafuadsafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc54314de47f0c6ffd429b1d7d0b1b19fa85596f6ed2f88889a16b7ae76dcfbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggpantekkkktolyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a53d76b66339259f99b98e3e5225aa0bd456f92047b518f4704cb4238b06c67b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oy-gioafisasioasloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b6b5a663392f41a44b0d16ac447092c0506d37dda22b80f1c98d4668139455 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olobc-uyg-ugiafaidabiuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9a61d1808bad4fb04d61e9b70fedff6a0ad419a66c8cdfd994d31603d309a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyib-gsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe355e3cd5c39cbcd615f471477937edb98e93b32d00643596d09e6b9f3d2dc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kin-afudsaczub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c5deda5f76856e429d60884636348e273acdbcd8753bd54dac43dc0f945cc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnyagibhghygdyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ae6517834f0e2d5cc8276450807931116b74362859f4c7f98abb36601caf0db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubib-gafunb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed1aad346e15fe331b7fb58d6ecbf0f7470089a66e1d65e91c08f7ecfc2ed8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mokok-lukani-huaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ad0df8a117f1ea97763f61f44e853d28e693d44119a674700b679e55b637b79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-nofy-gaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba413077f43483904ce6705b3135d97caa8e59df8893abc12afbcf6a99484018 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-komfi-cafegxadad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d47998599da8a67bf866de1cd804d8298c5f032d07cbca011bf79d5f3eb6efc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rsguset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30ffcba56ef2951fd88ca7049c44308a2fb91e21c04d3cdab618f0b79028140c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-olubis-bai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 586eaa0fe460d4af0048fc8142760d2a321f69f72e546a8eedc0b30095234151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-akontolbapakmuullfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de248bae1c542ea864945dc02924bfc86b2f7cc923f33aaf7803b288c76c6424 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gisigo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 096ae7b62a3151b4d96aebd464186069c4f959d3ee5eefd14f8bd1373f7a7982 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olobc-uyg-ugoofifahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd3bd9b6f56fb9bfd7f89968807f094c455557663786523b1c0843c8fe3fc21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-guga-vigugdivai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2696d5deb232bc776a48e12d708a2f6a079b6cee58ada50ab4c6463612a0faf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-alai-ava0nubu0ku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca2e8823f4390d704595e2d34c87c6dfb8778b8188418e67249a41f7be6b4ce8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...