MAL-2025-183521 Malicious code in lobic-gob-gvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7282623ec23949a30a134b6faae2b89be012967e8d39a72469b5850d63aa623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182330 Malicious code in imodiov-kofi-cuauscdocavgmoigbl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4156c84319357a5d7e1f70bf6e0d84fa50e89ff7be8a14eb63845474bb01ce8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183688 Malicious code in manu-oi-gisisgo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 935558bf7fcba45b5e0f1ebfd079722900bc309adbc5580ac6495bf463d3991c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181953 Malicious code in flights-inlutag-idosa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bcadc78bc14254dbd719e8325c15697c0c420fff875055d7bca01dbb869d608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183959 Malicious code in mitaukailok-don-olikoaisima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dba13c6a066c5e958594e2b947d0c474e3db37c7f3981a75b4b6083e9fd1dea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuiga-alukza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae78f3017f1d48e680d47a29bb4fb6f3dbbe20742ee0b8aac53189fb838a44f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avg-ijimamff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfeff9554ee1d46baa7a204f6ee4a118d5fdf1a5d87e6ab41d091353c1839f4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-ontcmi-lapikasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0729a66f314a00a16abecc568097c27f9a751ac2092e6e4ad66a287e22592d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilisiamo-ciuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b56724cc51ee708ff7f43c9733ec2657b0e429568ba455662d27df5220f12970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kidt-aog-uvufaifaafiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ceb84cf02bf439536deb1e73e015951270ab0e9ec944b13192a938995d693e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-klvu-ibaibcamauvaavafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 923a73e26e2d23bc8b5ec041895f0b41a481388ff38374362458af8d0cf43485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifus-ugaii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35bc6993cd6581dfd84e34e081b9dd53e7a03d4e57bae416504de294b67fff8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-alai-avabuku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c76beb6ff6361d2a8141a19a2881ecb504bdc8a9ed5a13b85fb050b2e1ba99cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dabtauzidami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af3924dda8e3251bce9b4714e3f11d7627f2bac65f2db4d0caac709c24e92a59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ykhjyafizgantngkool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d18ea84409b3a2c51ce959396ecb814a3825d94e3bfd350c707d52c32ede52a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lki-haji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b7f3e72a7686c18b0785f8a77d3edbd6f3de94e2136207ddd219904cce148e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuloig-tgviav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f4539e975707d64f4a260374e0c3d206fc574a26e7e61e6d819187662c8d337 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksgsdfo-alfdaion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cfcf6d27c706963bf3622d4d1e246351409dd5a7b240e35591c2b926a1fda78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olims-noliadsdsgnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebb4713b01c79cdde264b26af63a1d04c523827c497b02395299696b6a057509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksdfo-alfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 347022a93ba4cf38fe3d305a0bf71431292890ebfdd79941b8372d4eeb204933 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...