MAL-2025-183536 Malicious code in lomi-fis-fakugb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0620f04e87ad1df634f77641bb527f6e6e2002e99dbdac7976c4a56af56a3135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184442 Malicious code in modiov-kin-afbaufcaducxacgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 343ae45645f225363273d096f5c6ca8c2868c79e26538c5472bb517a5715ad78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182077 Malicious code in flights-tuiga-aluza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da1bc894fd97c7894bfee2486dfc1e153c2529167bbd5ce72aec0c816fec7f82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kit-bogavotaawfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b66868234ffc22c54dd48fd0efb37230334117a47d667d8825115ddfe72f840d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avg-ijimaumfagfaatugf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b47f068bb51173fecb3281eff7d7dec2492314f57149d64ed235ad713655971 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diug-damoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2184083a18220197a3c396deea8435e454ebfb3456f4d51ad48d728fdf6476ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ub-badadufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce8d31e8f22de289c7a58c6a4ba00920b969ac41e0df114cd37f9e43034d27a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kujaubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a515105704b364390c847f65133cacfa3f2bcf38b7bf048deb2b0932d07ad753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oy-giosoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad7915ada3b1e55960c6b2646163e620e0a6fb23e19af0e10ea347faf0c83f34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-srtrt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06f872e197eecde6b663d8ebb54944c8340688b215a2842af02d926cecda5df2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-diakavag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 682475149d29ff69e2252eead8f2bcdc841a158958450ff54c71864c2ede0bfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bonijauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0912bc2030700cb35a0e7f6be237c1d44bc684ab5a4107ff2909dc4441ebe332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ubg-atafuaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e967360dffb3d396e8744a57e2e1324abc4413fc45e699d0ec457f5b6bf6cc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-avg-dnif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f67469ddc38e35279a14ce9c9a80bf1c670121270b6dc77f3c121f4237ba83b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvog-dniea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a1ca104cbfb513b5b49043cba7aab76e2361bac6db9f434c4f6f50405837ad4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuwabimagavli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 189169fc19602925d2fa10e0c61c3502eb785365475a677429d096304d86ceb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-uibg-uha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2029ae0d40a4aef830e2ae70332d848284bc8850f514f36dc8f7ab6243198c59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-on-lakoik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd9eae6b5c3e85a5fecd89d619403bcd2f2c88d1e0b106a4dce9f0f99bf03db8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-akontolbapakmuuloltrtjygfsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aaa5215b894fff7f9742bab46c962cff080ff3b89161c2f3988ae94bff5d338 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184888 Malicious code in sonic-ijos-asaaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65e5ae8e6f8f47abab95678561c24ef1c1a534a623d393e257658fca0824b17e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...