MAL-2025-182349 Malicious code in imodiov-koifi-cuidcag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1570ab6b68d0b6576be52fc1060b4e34a1b84fac3a9b99baab6e3366b5acd8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182076 Malicious code in flights-tuiga-alumabivza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bd7c72418ef6a3fa5806c9c2b688ed017799ef8e3f6671cc8146b1e6a5e3964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182944 Malicious code in itale-adci-ykauag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fafa0887f0dfdea5f997a618a897456de841932c1d4dd6f8a18911f2866e3025 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183090 Malicious code in item-at-oka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12ca49ccfef66e849e8e8b80b9658b092468a630b9bb4fae0c1650e25c769b5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-foi-gisagabglan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26308d8cadb7c2ec9211c1ba8c4ecc1cf0e39d16871d360cf953f18798cd51c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuig-alumaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1dbd695f24783de2fcc9f8899a61f4edc96607ae326a810102cba7faa0fa00e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-gafufufb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3627fed569a7781a667b1f82b3ae9e051301021c56ecfad57f69589d626217c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggmatnru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc6cb57392d13aa1cdfc67f6d98c513b4375374585250f59fe30ba46240444e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-difg-diwfzcf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6824ad694f632a53fe9bd8ddcc46304432857abba528b704919ec53e87b6e561 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutg-oid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea48fbcef2b35d9aaefde8490a7665e0923edd5ca9ff482f47681f1e9d200530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181834 Malicious code in avangs-olioms-nolifau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeb6f2c40ed02a07f77d84088323fffe11e8d0238b00be2c68e578d2c094586b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183074 Malicious code in item-at-labieoka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b080c8a6352d1152a4dce40617d2a1fdd339bd7863fd683a647aa7630d1b21f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufavcseqinsdxaoycurptvmaduban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ec866ee2460c7f8f4e1af899b9ebd5fc327b2176f0ba071110c415172ffdd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-oliutka-taii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26870ec3dfe7116ba8c6d3fa509ae87026a1eac817ba2b983d011c0c6fe93e47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-gafugaab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6774ce67f83416897f0f3de596fc76cae4a1d76bbdeaa3d33ec43908261d9b4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-if-dakk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c02ef940f9b3e8cc85d2f32673e98d7e72e5851f9422bf954fdda0c40ed30dc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-avg-daiugadajuij (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c33be95a7c59e4bf89469a50eacc1cb34cacedd55f448b83554306515f5efcff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-don-olia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0a3675b69a680425c03ae8b025d42c23d87ceba2f9956dadb332a26b56adcbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unise-kit-bogv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b92347916918f56164ae183eb2603fd3163d27cf2d58caa6aac7879824f88797 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183814 Malicious code in masolv-avlo-cobsabaasvov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 374301fe9eee0ac01cb13d2900a67ec66305db3eedebf7dc6b7d3940bb3d8d2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...