MAL-2025-184490 Malicious code in moki-ni-hujikakibaaum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 619f8b325e5c54a116a1760ae11b458f84baa320605fb3fb40305f8746be76bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181817 Malicious code in avangs-olims-noliadsgnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbfd36ca0cd3863fdc8b3c7038a2a77efadcb54e23ef8a306d756e93629a362b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-fgafav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9a4ee05dc5d114d2ef4f9829e52ae58eb62895672a6efe45c71653474629f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ijos-asanuaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5c1535152001dd1aff1fb377123162ee4c6ef03e63bf85589e5a2cc584c8f35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oc-gua-vsjfhi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5931ef239366ba8ed82f65bca55d2c82f3575c2b2121220ff92f1eed2bdf1177 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiko-akuivnaun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 198288d7cfb413f84b5236a23ed3427a6a8bd61bed5df3f6062d7d79d99463b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-ahagafuji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb21f89fa5d9de34dd481ce083356a5718406984696261589c4b540e82ac2615 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ub-jafgfbaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df8f2989bd2842c5d5b5f595da4d2352d495c7eb45e6f68a2d53a7519b9e7d15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kag-tgvcb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b26d97015ba048546be0e9b34c8fd7d24f5fcf73c6c269ad507f13d5b52f638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kat-iaagh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d2ce76b37088f656e5141328d7c42473d26816333a9c6f0f136282fc0b5a4f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-ahagafujihjafdha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7d875bc92a83bfeb02c0e3f602fe5ed3012a5f8b4be44ae6ada8924617780be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olobc-uyg-ugoofifahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd3bd9b6f56fb9bfd7f89968807f094c455557663786523b1c0843c8fe3fc21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-jos-afisigaffafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa4901ada9ac753cc8a7f7e3f914e73886d77f8f4a7800e27eddcbe91fface31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3010ae6fa5ae0e9b92c452f4db374e18b87543516641377fc8adf8029ae3d3b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-ag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 496831f1173e1f891085affbaf362424dc416d7b9a02fd4544e117f722bcdeb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labkpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a50e0f6acbaebad9772f9f3834e3d5bf06bbb98f620f5e61fc908b655fd5b85b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnyagibhghygyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 644ffef31d064f7c8f8da47da02f49d6bf25921d56bf6926069cb7d1a319c9a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kinu-bivocuab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e132a38fc1a3591f68461543611b671b7bb54fe150cdecde7e35330ec45a7763 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dinhkouhgoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc84f060042a8fdfff4667dda8269d1c310df0a7c209f8b20d5a641cddea17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilisiamo-ciuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b56724cc51ee708ff7f43c9733ec2657b0e429568ba455662d27df5220f12970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...