MAL-2025-181651 Malicious code in astam-ift-dablia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf78f752d5cce1c84cf9e0ecc5558bcf34640f703e640809dddcdf38a6f878e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184888 Malicious code in sonic-ijos-asaaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65e5ae8e6f8f47abab95678561c24ef1c1a534a623d393e257658fca0824b17e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184728 Malicious code in oloc-uyg-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83657f24b6cb0405a7d555c8808dff22deb015349084f29cd35d418d6993a13a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183745 Malicious code in manu-oyi-giimsof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e20f1c861a01e0064124ef91f6027ed3f42a19a2499bd487929a89bf829c3aa8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185082 Malicious code in sonic-ks-ahagafujihuajfdha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7515f4973e2b5f7a5ad5a2c7a92cf6a13b48d9dbfcef24af4d630a7d795d4cbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-unga-fugiufuigfaicagiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98952e600288e148aa50b846059c186e4ae1ab07eba40055c319350de630a4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-af (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ba52c4c9ab56d449a088dd2fa00e9ba2729989d75b6de74d64fb2e47f6311e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dn-olikmua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf712eee3ab873dea307e16922050548651a75b7a6ad704a6f2c728fb430cc2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gis1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e71cf729d7bfa5955ea4c10c6503959df849dd9eac3919844f209b246476203a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kat-iadavguhafg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0db53e4ad93799bb5d9d332f11ecf2c451be9d2f7d5cd872c2f99b4d1886cd42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-daikila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb054a3059e3b12739b8c71925ef7a4a79afeb64b7cf42dc2a27bf6971d6d4e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183140 Malicious code in item-atim-kubuskuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ea70a458b569612e064a6229c713056dd5558289a5962ba08f9ad910f2cd6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-akontolbapakmuuloltrtjygfsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aaa5215b894fff7f9742bab46c962cff080ff3b89161c2f3988ae94bff5d338 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnyagibhghygdfyui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c38318e15828e83b1e21536fad3fefe46a16d0e8fe6b149a57ca3c503fe692e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uga-agidug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cc6248bacdfabdf7e86d071d14d36e901583ffabf723e76a952d9859eab376f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-diguafuvaoatav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa45b7d73d3c551bdcf55d053c6b768bbe5afe7b6429c79985ffea31ab632ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lki-haj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7202aac2b656d15c93ff23bdf9c602385785f9025c691db5798d0944c9c52268 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce7b4acd66c1b3f6eb43df195305b578637a187c69a1775a5677fc9761e1ad60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181879 Malicious code in avangs-olium-notsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f409f7896799d8807cf3f4bea8f8c60e79e0d194ea5a6055f8aa1856b67facab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183429 Malicious code in lobac-ubb-badadfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6158505cc6bf6fdb67694f822d74ae234619a285cb80036746020314580eaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...