MAL-2025-185336 Malicious code in unise-kit-bogavfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4540878abcde8a4b80055452ef5f0dc8932906cf9ca5d4261b0a84d4841b49a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182909 Malicious code in itale-adci-gnyagibhghygdfhbfdygdyhgui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 318b230e53455fd502976209bbc786423be92e745ba4757799580f6cc7f659e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofeki-afahiaugai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c3ce465a7971da291e9171171225e991c3467c01c88d79f7bf6abd118e8e6ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-if-dalimianunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af57249d3abc9e359d65e0a82ccb980be4f7fbb142503d0eaaf52416cd5edaa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggpantekkkktoyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bc4b979045d06ce1f55fedfe488c8929c6d1a43fa0a91150ad2476b3dbf5d8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-obis-balamila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2320b36181400963181123519e77706f30a16fa02e06bff3bc526dfb114f2b2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacfgteagefac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487ce730e83660af79d2a7e0d28f22fa1ccf0dcdc7fef64a2142a5c74b6b52c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kg-tifuacfivffacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e704ba8eb5b2e34bda2716e2a689da0c4a649d623e06fd18b8a3dc634d66f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-olia-itani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ea17a9fb864a366fe506facee4fb4315b6b020834334c92bfd309ce0705a6b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irhar-aaedde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4953703c6102ff493b3aea0c1e569395ded7238ffa6e424cc48d415d83e0b900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutg-obolavuhiaduli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1799054ab2db9792435aa5fc035a6817ab2a09a834b2e3b3f2dd1578ff1468c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-ung-ugdsafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c282a69a8b0a9aabb749a1b24a7d55728ec3891165f625b24ab4ef2e2f7d810b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitouko-on-lakoikaunoaak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c145dfdb09f14feebd54df4f9bbf7e9251f56c76440082ab953cbc790fe93b2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-gafugaab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6774ce67f83416897f0f3de596fc76cae4a1d76bbdeaa3d33ec43908261d9b4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-avigiyafagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa426b17fdd1354153f17c4e22c56ee256628a06d468bf0c8914196e9e2ed9b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ub-baafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd9804ff89dd5e5042b20b864cff96fdd80624040c930ba38980a901d1fa9d67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-jos-afisigafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49a49149f7e4220a4ab6acee6bfc0be50b03b2b65006c9d6da637954bc7a4096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-avcafivaivuvagcd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fc5932a13ddfd41b94cc7000fd3f7c47c265ba7d302c8e2fb9a8831a2c273d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avilo-civbuaofoiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a931196ae9d34edc8fcbf02f3f2a81231debfcacc4ec15099a04258de316db3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-digoksla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9523178dde35ebeaeaa5aaa7ee9e0adb1d8c89b76d8f0e7564d69b4800c0bb40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...