MAL-2025-183444 Malicious code in lobac-ubb-gafufufb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3627fed569a7781a667b1f82b3ae9e051301021c56ecfad57f69589d626217c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181900 Malicious code in avarag-obis-biabla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d245e5bacd434e0274e5b846dc174614b9686d9e18becf0e5d35b513bfd0a2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184568 Malicious code in odasv-kinu-biocuab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6dd5d3d7479c9afe47508366fd892a9ca5517781576d3f5f57cbebac50eb08d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183089 Malicious code in item-at-oa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b452075ca14f041c20de777d02f1b0be18adfc7dfd9ca58c9486e9d02fb0ad1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oy-giosssiosi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33d11bc11fc6f5c95b82eae4f427885a689619cded7b0f44d93e8f831deeb793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kugfi-comoldeai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8cc33150348946fe80a3bc68efc5b3651c9f1da4d029129d6e5de15a018b6d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutg-idulabisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2562a4832701f72844948fd44e2d8d5479f11eee193da1b3f824315042d0372a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiko-avuhuku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f71a11bd93f13433477226e847092a7a720e6f4fd1d20f8143f8826e2f9cfcf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dakaknuioba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d1659c696886195e18233769ae5b86a464467fcaf904c28066051e9710bd4f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mugiy-ajoig-daitajk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a952cf9282e23a08ba9ff19ec953ca1b27cfe4abbaca938ea1ae685dc09f47cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mugiy-ajvoig-daicutafamajjauak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3090795eb14acdc5480c56f1795a1eba2632f750ccd7e5fd4aa8d131b624a71f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-afayorganu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d28c3468d07e9cabf90c5c3b7dc2f30f41f4f0ad1311c0e4fbea4698dec1181 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fakiugabas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32a03b7c4a0e8cd795d944a02e7df3508bc3ee0608fc7a92d8665d25a6f930e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufi-cuwabimagoloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb61de5585fb8ad783ac807737f3eb4f3e9f266272483e4c2158619904b0170c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofeaki-ak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b55cf4296f17a024700d1f446ba4e41a33842e49ce832a6bede0b1b0c1c25661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufi-cuwabimoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68818273ebdb2c89b95a10eebb9b52042a4c8700947e50b1dc0dca65d684f3cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kidt-avog-uvufacav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eda547aeaff92ac189120aafe7673f4697af5e8917e9e742b85d5c7b0c08b824 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggryygbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7821c3d2ed17b7b7532216a49ef429b80fef471444aa3197f0a4b90e010c8b96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnuygurgjkollujlnrti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a08f6a18e817394f80cfbc9139ca2e128f2d76b50a2459765ae4e1c2b63fed50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-aknkonbyunaymhentbangdati (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86fe6959427756dc9d653025da191e66a6391c9b18c3a20f8cc9ab2634756fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...