MAL-2025-182498 Malicious code in imodiov-omfi-cafacevava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a722197a6638173077c8604159d553e1bcb218368815aaee412c61bb2eda83b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182297 Malicious code in imodiov-kfi-cuauscdocavgopmigbl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e07b05095db3e802370348c2b698a36240ae2aea8b769ff3b96176f7a142c42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184859 Malicious code in poliaz-alai-yulbaivuku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3904c486d9c3a96ea1d17a3dbdc59a24ed3dd4d35afe1f810c56124e47e2b9e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185082 Malicious code in sonic-ks-ahagafujihuajfdha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7515f4973e2b5f7a5ad5a2c7a92cf6a13b48d9dbfcef24af4d630a7d795d4cbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182295 Malicious code in imodiov-kfi-cuauscdocavgoigbl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbc38f28537061fd5039b7c85c2dcc6055ef5c7e9911cdeb30a0c39e974a16d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rsust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b1b4128e62439d286415ececc852c7a8bb5bc143bf54e53c1c2225f0b91613c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avlo-cobasvov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 106ef3fe8c68cce1f90a9bfb61593399acc310849cd1f121ed05d40dbc9e014e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dn-olikiakibamua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c499d88ecb544b41b65c0ed54429aab2973286d612bf3b2bdf6c12f6f6bb12da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-noy-gisostsogapo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45787c96f0619c2117d2249c4a27503df968c5ff5664574031532b173b58bb33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-ugaoyugafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f644a00ff76cd2bc2ac4ab3544cceaf028f92f16ee81127e9e56fa20afc0520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-obios-bimaaogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fa859dba0320e214b64becb496c2d76474138c84ea0c45735c72f5765159418 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-ali-avanuku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90dfe94e6fb80b17413cee1e1877b79e62220e9a55228cd56b5957c8c62f7c22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuwabimagaovoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6621712c2fd9d1858b2207627e8158a556fa1330ba0e203f22d0128dca09ff77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kuvu-bavoiybu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e017a5e2f27cf6a5dae6e7c48a03507ab9d5234d183d092e4a15717279028029 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-labioza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d45b61fb1b99c6cae867832be66e64e38f11220679f03b74b762937c8337097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-avcad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4229de7d68e3dc97d2d2aab209f9007bb74c67be9f837a14e7899fb875ea6a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ykhjyafizgantngkool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d18ea84409b3a2c51ce959396ecb814a3825d94e3bfd350c707d52c32ede52a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-kvu-ibuagofab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04c360923564f139ce84f5497fd0a3c97b2fbbb66cab79a59edf48706c834fdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociy-ng-gi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e3d26599d97030671bdddb815ee95bd413504e819ec121eab825d5fc77c1b82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kat-ih (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37bb9b4ee4a7047d3a50578fb0c813dc3e8af4487315de154804df6189c1488d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...