MAL-2025-184094 Malicious code in mlokok-lfki-hakumajsubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f530fed07dc3ad1c9e90de32a5ea415e627b9f883c7bc1da14bf3d879b60edd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183698 Malicious code in manu-oi-gsisofai01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15e8a471912b33b6e4113f390d5ffa2f3bfd3d57e4635eec9141c9a56c1d1247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ug-aguagidug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e559eb97c28fe0a50eced0bd7920844a7e79e055459340ef72ca941eaebdd4f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-labiomizazaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb68532e89779687eaa7fce69ff574caab21f304b7ddfa962528f5e41032303b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-uhitaggafadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f2928dd2e441f6e124ac61cd608ce2e044c4fb26cd6b32daea874923a9819e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-olubis-bali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1355a6c47d32088c071c6942f71ab03dd7ad91fcaef58f557105d450a482e3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksdfo-alfdaassdion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f51fb2bdf548f32b43a9b2a2243c928939a44867e768a280811b73b86f2d6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dinuhkosuhgoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4681022783bc3962752a4e089b2c879e733b1977a0e1bbc083ee49de35e8768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kidt-aog-ufav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bb28371e59295a4812b9935160f3512a46af4d6a7fded2b098996bcb6539874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-kvu-ibuagoufavyauacab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a363b2840910566d5e3498bd6aa7866a1034d985bd1e51889854211319fcec3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-obios-bidala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86e3553b88dd8bce29840ef7b04dc8ab513fb2038d77e1b44aa6a61be0fd55ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-digoksnla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef33f4923305e51353cbb7aad946aebd36af6eb3fa9bd2a2a3e4fef383e5aa58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvog-dacak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60eb697799146d089002fb84f94854468a3626bc557b47afa9961f06cf53dc8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irhar-aaesdeadeadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5afad523c4a98a45648bf6a95e3fbde47d2deb71aa75ab09cb025b5862ee218c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-gioafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e4180704dedc049a6b6244c2515ad52263c6e924f7b970d53b827d33fc4999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-uhitaggaafadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f64ead1f29a7a857fcb190e9618706ca4506f262ebd7f691743bd16710f018fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofeki-akiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beec1e2cabd735ac524a717139bd2699a090ebea49b13f00397149cb53b814ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oib-gisosaugaug1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62c0e3ff170fc5fd68fd485296084da80d15ea70ac7be727f597f1a8881947d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bonijavuficuadcfvaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e95f787eb41af8583d91004bac9d809547aae1e5324844156f6944484e88ecce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyib-givaksisois (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 777d8292df47179a724e8fb7fd4d389458e9dc34c2d3eb0f650e58d48dba0a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...