MAL-2025-183649 Malicious code in mahnu-noy-gtogapo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3693dda8ac96299c2c24e25646fe9ebcce5e73cad9ced5cda6f576e6dfcccdf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181740 Malicious code in avangi-ogoa-inmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ea9805d92c354897ae452edfdbc6ceebaa2190cbb03eee83f6a185eb8f7214 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggmatondanggantgyru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebba633d1e62e83180d0f52898dee82ba7f83f013cea6be5ec4067e58b1a2d09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaz-alai-yuavku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a524f9474ef058ea8eb7c86a6a511f070513cc0478a3ace592094d5c1bde35aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acseqaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f3b99d0469be20c6bdc720009eb1f6e3af13a0940e7a11b3c6aaadc06b61371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kt-gabisayusgf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73f51b66b84c48cc5ad1d8320f21b1ce6362bcde1a6c3af75f412cabc6648c9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-adinolo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01ed3dc124963ef01056912e76eaea3d55464ed7b342dafc2a59efaae5b08767 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyib-gikois (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d643244aa1f83bc88622683650e580d74f894dc6615cf8fdabb5c803b3ffd678 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodji-gigaiuasgsafofia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd3d4652515063149cfd3b6e35291589decee012232a9472700057d8010cfa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaz-alai-yulbaivuku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3904c486d9c3a96ea1d17a3dbdc59a24ed3dd4d35afe1f810c56124e47e2b9e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuloig-tgviavuexe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae4704499b268df01d82e8e5775ebb598190127f353797d4dcb74fb3757c234c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihoan-afmcautr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c1fe39378db0c48bf6c5470cb84161c8a8d5835e25868b376bd60174d3462bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fangaiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f623daa056305bb38d461108028817cbcaf149825d7f3628267459ea6d8b5a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-ofi-cafacevavisvomolcabyca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa7651249fb9e6168363c16a3bf517ca1eccf999ff0eb540e52c2a37919e41bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-kubdzika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f2152b9aef5427b12a60cb801a28cd8c8c7f7a5b76a55ba8d58ab38dc383eb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kin-afudsacz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bf13d5370cacfa092cc755016ea4f3a9209310fc0bceb6d8af02a93026cf7c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-faverufadix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44ec345c78072d294e5933d7af00ebfc69684a5ba7ef1be67645909fa895fa4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kt-gahuvfadufadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1cf8abe4a3f607e0ccbf7a654ecacfa3b781fc04de802a88234ea3d1a945d57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-gua-visgojfahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d492603c4c3c9ded6c5ede7fdb31e617b772433e8f1713acc474c254d7badb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-nik-hifdagujbagaigafah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbeff5254fde3508aec09a8371cc41ee27070b722269f4a85e95155f0c13c7a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...