MAL-2025-181957 Malicious code in flights-inlutag-idosao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc89f15eb16eb7ea8dbaf4833eebd01ecd4b783a51996369fe679ee201573a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184233 Malicious code in modasv-kuu-boaffu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d44fd225befcecf77ee5eb23c755ed87646391fbb6f07ba795b440ad2c5e450 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181621 Malicious code in astam-ifst-daikila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb054a3059e3b12739b8c71925ef7a4a79afeb64b7cf42dc2a27bf6971d6d4e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182097 Malicious code in gocay-guga-visagoihi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0047ebad62628afc662020c2244ad4bf5b402a62000defcebc9ee0f2aab59a71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182548 Malicious code in imuay-agig-iyucauaugafg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec5110549c90735003ccf89029f171fe9c000e134c5167da507d77e55aa285b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183224 Malicious code in kisut-difg-diguafuavaotav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f3896ad180725bfbad0ca39cadc686b7f9d995f5255f013a8491ee95727e04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitaukailok-don-olikoaisima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dba13c6a066c5e958594e2b947d0c474e3db37c7f3981a75b4b6083e9fd1dea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-koig-tmoeroca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d264068b09c442c3da026dc8f62816adf39d765dde846103ec49b628679bef9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avg-ijimaumfaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da350e4cd00f9ae3e1a80560d5277ca32bbd2381c9654305f1708d4d92687c5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oihg-mopigaffc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5142e8e6e7b1d40814c9a0156c955dabbd069d5ec35283e332cb536042a35bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tifuacav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52561131aa6cc60a8b7bf9326544b119ffe36b9a59a961582d6ff5d32c3e7069 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-foi-gisagablan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e66ae694d97daf0aab6db334ce10ce6ff06b63466f9575e1ffe73a7fa0d6603 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fangususo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e31a175b574e8000dc9bca36af5f1d341471c36fbb59547b2aa52b75de10beb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indexa-fotadio-agov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63ae94c599719c0839f9b96f0eb1d17e900c3c0024ed0a8010e1789629fb5a0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-ni-hujikum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02c0617744d1aaf6ae6edcfef40b9e48191f5a9f736e46b41d8fb6a8b4b73b4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-nilant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09dc282a0b549b15da08c7ab72ba2ea98a4614737250f0a67a122266363b4acf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lfki-hakumaubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 961a5e265cb5600c433747c48e907dd34c0bf3383f4b2afc18b5ca98a8d20c25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-jygwuyrfwuyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21cfc02afe4c0dc735d52e23c82cfc4c875b9cb7ea0ae4599fc76febd9a9f7be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-jos-affoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 598d9f3aa2d6680dafcabadf73b5be6d33aa841560a0ff888cbf95f624acd953 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-jfgaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7dfc4f51954b06518e4f883edd9b9ee4737d9f3ca85b81e3f54070a77074602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...