Malicious code in oc-gua-vsjfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c8dc7b6633a1c34fcc3cdd0dc777af65caabb3193645db070f9efc96620628c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiy-ajvoig-daicutafamajjauak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bbd0d9254d35e1f164bf5580e528322225bb809b3e3d3254335a8548f466077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-olubis-bai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 586eaa0fe460d4af0048fc8142760d2a321f69f72e546a8eedc0b30095234151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-ali-ava0nubu0ku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdb0d66cbb2c695b3d0c0a0dd4383ce96503cdcf8473262d9ce478efab9bc593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-luni-huojakiavugim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5234a4f70088802541d2712233078e3f8e610d790f1d4cad5ff036cead5e57e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8697849eca8455df70040c6a83cfc9a1c04929b07ecb9b67f35038bf8911d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tifuacfivaacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f5c4d31880314a32316fe644bddd2e6e2b4b5bc291168b5c03a29f35db1c410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7715940793b2643d25228b1a964dad995ba3eb7b6ec44ca2896e06b0e4acf427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-hykaulaygkyng (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beead4622702ce254311c1f95e9e87a3ea01623ec9f967078efbfe0371152a2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lfki-afuhiugababanagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93c628d76da304ebe30bb9dd8ec1d0b24c2b75ff70e2a158f7da868be2708105 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufavcseqinsdxaoycuruban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b05e8e6de9f9f146b9aa93408a90a1c8d44e748d7b82561d911d75fd99c71589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kubuika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d4f1d199d39a944c6d5002d79a28f1e28399baf7b224ea826e16f2a22cb872d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-badadivudcauagafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01234253e7cf348372ec6d17cae3db681252c0610865923abef6d22d1702c027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dan-ujokulia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5cb22d315a501d03b10e8adbaebb56ad3c4455a69a9e6796866a8af99e11574 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-gioafiasoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c0348e750a93c20654c0fbb6e5eabdaa7814341176adb473e55e206393df7cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kulvu-baiucaufaifuav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad2d085b354a8666bdc1ec38049622e580c50a4eb73f1ddd4cd4191b83ddebc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kin-afbaufcdc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 761657e617e9706c970df5a5ec9e69a0eb56c083af3a7c6246fe0cf7e14524e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labieagyeyoka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c42678231158933a01b86a9c14491f5c68ed58c8190444c13145a064a39ce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181930 Malicious code in flights-ilutag-zilauma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e09583e1436c24bbe209fd0fba0cd49ea478429a1c517b6100cb7d45eaa925b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-avcd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d27af0f513ef5e06d7607e9ef91d743b3e42098830c214bf44a9d432f19ca2f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...