MAL-2025-184096 Malicious code in mlokok-lfki-hakumaubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 961a5e265cb5600c433747c48e907dd34c0bf3383f4b2afc18b5ca98a8d20c25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182617 Malicious code in imugiay-ajvog-daicutaamajak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ef2d5a8108eb638005dc30b155a35f027d24913c586dfe9c8e882ef10cd79a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185035 Malicious code in sonic-kos-fusg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77a1d1012cace5fee6c9b048af25b1e2f11ef2eb369189e15a1d544eac9ace63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182192 Malicious code in gociay-unga-fugiufcagiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fad9d9361497b4323311ac1d1771cb0def3393b7053afebaad76e413f927f053 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-guga-visii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fd58c74294120aeb25f0be98c8812dbbc4175806a5da42a3f09760353550641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-koig-tmoerocnca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26b51820c86ec2cf2da5139bd92205de20713ab22c1afdb51cab4617c043d802 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-omfi-cafacevavisvoea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6fd440dd5b06670999e260fe000b83e05c5f9e1498971c921abda151cfe3cd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-ung-fugiufugfaicagiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e35822fb3d4aaf18929aaf77c70ed51875fc5a178cd3202d283fdba90a1de398 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lki-haj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7202aac2b656d15c93ff23bdf9c602385785f9025c691db5798d0944c9c52268 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubib-gafufufab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 797caae720bea4796774982995be783d166dd611c005813f5a34c139957ce185 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofeaki-aki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d67e223c5617163ea4709c518ba42d6b99413519a3ab0dfa100d67ef556c381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tgacedcuav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb41dc9409890ddbe6977aea14980a2a460a7ae3fa4e5d2dae0c1c7b337f9ff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liobc-ug-afayafuyacuicig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6342cd7fab97329c9e3e86cbb1a21dc269e9447fcc811495e5711cb25a1af142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilimo-civufaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d4662fe9d06fcd84b06fa641c844cb59864d1936e8c7e5c93a0f31a80a85c68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobic-gob-gvatuagfagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f493869c769f23ac07c56080dd6ae65fda964dc499a5e514f435595b8f59dd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tgacedcuadojxaeav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a1dd553d96a41279e5731f6652ea10a2237a2cc9f72ea1b0964df07ceb3b619 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnuygugjkujnri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98be6827f8ff60d32afc362b8f26b005fa1b95f3f8a5f58256a7ee82dab32355 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-kvu-ibaibuacava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38bf66b3bdc38052bba587cc6722b6f7acda7d5ef39774f16e1d03f0f152d777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-nil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed3df47ad2a0e0d27324be1b1eb1ed4867bbcd3c89878638a2e0fc04b4bf4d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitaukailok-don-olikoasia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8f87c831fd5e7588d7e499aa9689658c615af90a919402345fd627b30dd0289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...