MAL-2025-183790 Malicious code in masolv-avilo-civbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68f03d3a93ae2c598885dd37363241a88a780dd0b7a3bcf86bdcd9b364bbdc74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184240 Malicious code in modasv-kuvu-bavoisiayabu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae3c1345dde30afae01a35d32a91521dfc0a5ced89cc1e209407cbf5ccd6925d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184579 Malicious code in odasv-kinu-bobacuoain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 571849d358e169f60c5745f4694daf6f53b59d6da6841dca5e14fa2743a8f2e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flight-iloamtnag-ziumaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bec96fd242c33fd631130966aca211d8c1fe497a681037a1ea24acc80038d3e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-ung-ugafudsafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b29578da51566633d819683e6cce23878f01389b0520ca9a802b35ac364f498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuaucag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c661e25534ec432bd05a8163fc8fd81bc2bcfa6db73c23f1e4355c86b9033b78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unise-kit-bograia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ba6981afae6474aac8dbbba6bc8bfed5a8c515c75ae13b35a73805fed9038a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-ugoofifi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5889bd28b256c558f4b9ff1280bc8e2f4f7c47329dd99765c31447422a74b151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiudt-acavog-ag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2549cc7227700e91a157d81eb2d1e1512c77288353e2f0b34ee055e99f17508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labieagyeyabbjoka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c5aa5ff4d7b099242512abeb901dd99979c4887fb48dedbf2b06b8ff82b4277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-faga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 839911df5eee7c783c483105bb63bae889a776bb393bcf77c80e808af55216cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-afay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 635457d7c4b3b4b12d7eaceea1a524d1d39019c0a3d48d5d7bcdc6c318c47fec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-yafing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2da81b4e5dbb224e6016e2d76c4109d8aba0acb07d0a5fe66d5387e0c8afea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unise-kit-bogavotaawfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3410b120e2ae4965125c564ee09b3d36062988c478d1de2bdffc4d4b7d4d1722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-akontolbapakmuuloltrtjygfsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aaa5215b894fff7f9742bab46c962cff080ff3b89161c2f3988ae94bff5d338 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilo-civasavuium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0655f7cc1a1c1137db7d4e3591f720145f3ab4424b378abca43989fafc64219a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodija-gifaoobaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9075b2157456d3bcfc43636c8b4a2ecf4e324d0cc9f807dd0479ef16069541c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifus-ugofalia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e49f85980110fcabf1d130f5057ea19c66934c1cbcf05a3dc59c95fd1ec28d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tiav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5431f41cf3c763e3ba5c74b15f15863658d85189783db3f4df39f08cfb6eff27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacffgteafsgredcadfacvfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e7901a2c646e6294075eab71aad82ea76b3a3d6868dce540a45bf70f3c036a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...