MAL-2025-181920 Malicious code in flight-iloamatnag-ziumaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2df12a789088bfd9e43e004f6bc9206cb3c5bf74205582fd4aa8e4d5fd3399e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181643 Malicious code in astam-ifst-dka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d52cd371cb4ec205b7fd12d404e58554e2dfdc1e29febefdd532c852d2c62fdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185057 Malicious code in sonic-kots-jauaab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d06d4723466c1e3bd2ad5df61b463384c37387cb6bb212c53ddc25ff32e72d1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183159 Malicious code in item-atm-kujoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6858429c39d692f93b472ac0b18d10ce9becd4589a086c363eb1b0f5cd655c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183959 Malicious code in mitaukailok-don-olikoaisima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dba13c6a066c5e958594e2b947d0c474e3db37c7f3981a75b4b6083e9fd1dea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiko-avuhusibvaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6429f3d606080c77b846247494b9d82ba93c225dab94c644f52b4ab9f48d36be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irhar-aaesddee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f2189681ae1fa11916be32e4176d5937270505c77845e44252a9dbed50c6840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuloig-tgvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af44fb55835cb07e0e5094e85d79087ba5baf4266bf6453d544cf8faf1af3e93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaz-alai-yulbaivuku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3904c486d9c3a96ea1d17a3dbdc59a24ed3dd4d35afe1f810c56124e47e2b9e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlok-ofe-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84119092b3a8966c43f09ffb7dbf6bbe86ba409a52f94d25f5e88ea79daf69d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kt-gahuvfadufadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1cf8abe4a3f607e0ccbf7a654ecacfa3b781fc04de802a88234ea3d1a945d57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-afmcauncxab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf2ce54743ad9f0510657689bcf11d6deed02e8d2e03dd6024b9ae4f1841716b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fusfog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df3526d8756b30184a19ff6014ac0972fcba170d20b7268869505b7e1ffa4372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihn-afbaufcaducxabncmags (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ded9524ade714ec166d85b96bd398702cb39598da00fb421e5914b02d1b884a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnyagibhygyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 777aa9ea6419ebe9c15f84081eca764d6bebab54e4b3339761462d208535b8f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-ahagafujiha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 845b292470eafc13b0b4b09fc30b37e4bdd96c5beb6974b69ff9f02a14dfec58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ks-fudviafyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9419477d9846ff4b3478f9382462018bf0729aa4c45a9e2770d8d7b71f444fa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diug-dmoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2e762014156d39642fe5a8632d656f419885789ac8d48f0d30970bbfa1aadc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-faff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c22dd5d3c322c4534bcc3849bc40eabf535ccd234411f05ae2a2c19b10660207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-avcafivaivuvagcd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fc5932a13ddfd41b94cc7000fd3f7c47c265ba7d302c8e2fb9a8831a2c273d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...