MAL-2025-183302 Malicious code in kiudt-acog-fafiug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969034054167fa7e4f1c26d0bc110998f524ba803545d95413e45cc00a21d30b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185195 Malicious code in sonic-oihg-mov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f47928018fa75183df95ce01bbc975bd76116f6c00eae15241847b03ea6d87c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-badi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2190990f78d24bab53fdd71fe410e9a57e7f1c8769a6e9e42fa016d13295d56e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuauscdocaigbl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95919ecb2f04e2fed4fd287cdaafb4d93641db7a39a3c405985d33cc654831a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181992 Malicious code in flights-lutg-oidabilmo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ed35904c7a20eb4be11c2d7878bbdc5e090150efc0d2f90f4866d3ed717e0fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181869 Malicious code in avangs-olium-noabu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a489fc8dc6d5c9ccff8a09a36c16e7d3f38767f85dd7072816b9a2b8dfe622c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182226 Malicious code in gociy-ung-ugauadsfis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ec83d9b8ec067658d52a6dfee9a6153316afab3b1d5f387c0e5dcf4e3ed319f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loibac-ubg-tuagaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 670d14b2f4ef3bfbef032fd90ad00a1c5299a6c299f06ed05b4978bec32014b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baa5f02ad1e2b71a6d5f1839c4bbcd63ecef37b51fa3d0a4e1426575acb9d760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-on-lakoikauoak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ce3b1043814718b6b2283d845cb16185c26f41c5c9781283f44f2641dc2437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84822e962ef693c1564066dab1c0453eeecd071c49e6d8475fd8c05e3599371d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-afibanid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3860a54bc24374ccbf227817309bfd7daa00c6af7658f1efb6fbfaf992661bd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnuygujkjri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 900b724c772f18813d66a98df15491b29e7e31e2fb7f4f32f3f2427d0a8feaef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnuygurygjbkomtollujlnrti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7351f26975a5eea940be1584ec5bca09f79bd72b7af21a8aeaa834e05858c553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-ni-hujikum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02c0617744d1aaf6ae6edcfef40b9e48191f5a9f736e46b41d8fb6a8b4b73b4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olimos-nolinu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9a6422b662a8de02cbfbadbb280b43ce57908dcec2d561b1ac30e03050b31d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-nou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9073f7af806d515175efdaff87dbdb96f98a181a0cc0692d1d19850c46999366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-difg-diguafuavaota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e621cc5518806235fe87c084e6d740b36a8f6e71c6543c3bc535afec0adeb157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kulvu-baiucaufafuav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd19e7e8d11de16c5d578537927ed1288e60b3d6a5478f9f10487b0909a9d719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kidt-avog-uvuffacfeaaiafv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 910a9d65355299748bc78ac9ff8962eaac96ad217854d75758b256962d443480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...