MAL-2025-183749 Malicious code in manu-oyi-gioaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 949587c67dfc2b2a4fdc2a365d309303d6c82829ffb19f93bec6d29be2712ef8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183113 Malicious code in item-ati-zpjozakuika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a01e48f83d0237621895ffc23789a4c79e696832f7b557e4b5ce0aae5f40559 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181942 Malicious code in flights-ilutg-iduisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a315906dd4c81266b4b476d40d475a471d83bc7723d47d7f156a29ca9331735e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183685 Malicious code in manu-oi-gisiavasgugo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81abc8ae624a6a0d1895a317450b62721dc097952e3d535f6b1ab1936ef8ce06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184325 Malicious code in modiov-kifni-ufbaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ff31d31551cd8e922fa0afda1195d08b39c347a7b6ceba7cf3377e8a49d0c69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182012 Malicious code in flights-lutuig-adfio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 788b2b1105ad14f51e61a532e89f46d3666518bc9ea1f8c014465c87b099b7fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184598 Malicious code in odasv-kiuu-bofaufni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e3041d9de753e1eaf8b372738008f9e7f4285f6eec8f26e6deeb301ca7d63d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kit-gahuvfadduuvufafadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a2b22aeb5684a5d99a3c3dab9406d35cbbb982677d150fe6b0201379f6e3dbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183880 Malicious code in masv-ilmo-civasam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cab4acfbac3870f70341187d45cddc17523c011172791d49c5d701f49aa96121 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufi-comoldecoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 980942773f1738a9f96b560c1c3535b71166986ea0ab14e646e52f99d6af8426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in one-kat-fidlav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bec38a12f2243e7e966a88a318c5bb2e2e48563cccfe5109fe8eefffcc14108d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bobacuvoafin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c5f408701d2f1d73d1460b93efd4a84d23645f391b40e4b3f533102cc1feaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-gifaisugda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902fa18e300444f3add6bcd78b17dde5be06aab5e00c2a059db434b1ebb6c585 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacffgteafgrcavaebfac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46fcb472cec5586fabb40319a39767fc5eb0dbd07390229f5720b5cc2fdb543d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-afsg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bda7ec154070d1c79c46a223e89ae53d402f1785884e7db30c605d9d799ccc70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flight-iloamatnag-ziumaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2df12a789088bfd9e43e004f6bc9206cb3c5bf74205582fd4aa8e4d5fd3399e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-komfi-cafefgxadxad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bb7d1f99670763951c85fffddb8162e8283e418292edf657a171623f102468f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutg-oid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea48fbcef2b35d9aaefde8490a7665e0923edd5ca9ff482f47681f1e9d200530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodija-gifga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc7c5c6fc8b12b73ab44f0a8a2a4c5fda8f02b6e57796ee18a0fdcb892401740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avlo-ciov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4be94b058461bb5172b41bb9e6abec86b0271affb184c97fb4dff611d957e36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...