MAL-2025-182652 Malicious code in imugiay-avg-dnif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f67469ddc38e35279a14ce9c9a80bf1c670121270b6dc77f3c121f4237ba83b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185006 Malicious code in sonic-koig-timesexa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea7a733dc6a23c0a32a1f22323cd916816dac321e2936f9472b5467fd16a1c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183855 Malicious code in masv-ilimo-civufavicasaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c679cf16c3a0a9745de8243cf7b9185f63ed8160d894904e6545f5a38c97897f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-komfi-cafefg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbce9e679a2e4300e1dc48fc9f4fba28a029fca7f7a40ceb39bbc13576e85d22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-jos-afisigaafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ae387b255262e50ab0ed595712ad708c3a6fe4e6d747de604a3ce312d8a56d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-jygwuywuyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8caff64a8f6f6627af47b658da3b2a0d5e48a8abb1ec42c9d5658048e3c3f09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-faver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 252809d8699985524d5e11b5158af9ae32d914f0ede5d69842a67e828a354f85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-foi-gisagabgilan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 324ced8bfdb8396e8bc348b008023d6b353150954538870823614ce715b1022a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-inlutag-idosa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bcadc78bc14254dbd719e8325c15697c0c420fff875055d7bca01dbb869d608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gisisgo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 935558bf7fcba45b5e0f1ebfd079722900bc309adbc5580ac6495bf463d3991c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cubl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc69b3c975e310555568252b4b616dbbc08adb97a66ca3d111a7727eeec002f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kjt-garvfuaavimas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de5742b4cbc5a50874fd60d90053bd74f36a0127ecb843461cc1503de6a39e93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fangusaugiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6679ce44d63e30b895e5152b35e676931e6046f5292e9e15cc6c51b7353dc6c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifit-dabtauzbdami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84655bdfa4fce4c7da62d1562b3724947bc57f7d107e1ef0154570ec15105f76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fangiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d378327361be19f66459d3b835e3754921c128e643a95ac70522383204ad593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunise-kit-bogavotaawfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a205d995a596dcc62e666ca040d27dfab0a5f2c7eb4c42b9911cfa803e4ac13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loibac-ubg-tuagiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86dda0d463972891d31ed77b216843f35b4cf9e11c48e2193db9461c05c50925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-jfggafuayuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbcda6f04a74cdfe960e87440eea2052b93e49ecdf039de2001832cdd60a83e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dan-ujokui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff51f7960fa4264b5ea644beb41d4e8884ad25329bd72cdaa1c1bb436ea7e93b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181973 Malicious code in flights-lutag-obolavui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cc080d5e03d7dcb3fc63d724583c1fe339734b4aa3bc0c8053f20d9f673ecd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...