MAL-2025-182685 Malicious code in inda-fodja-gif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89ab933f27e619c9dc0b4f18957571685bbe658a3eabe3cf690bdb86983693c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182497 Malicious code in imodiov-omfi-cafacevaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba2d72e4c0dab175c13203c5edf523dbc8c2dbb9ffc7a805cafc4163a69a17e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182859 Malicious code in itale-adci-ggpantekkktoyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5a72d7afd022ce0bae90eb2f2e5fca309e7f9faa60864e43c144a1f51237633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181713 Malicious code in astam-ifut-dakakuioba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8371d659916ed8b84c9bb783870adb27df9d3507e8f3765b2769cab37ed1d28a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-olubis-balamila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3348c5fb7507609e00456af7f745e6d9984154807f413d2adfa70e3758d2b093 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-foji-gisagabuailan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3743809c2bce82ff4e88c4037a638396698490dd8248caaaacd112aef758d44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oc-gua-vsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f6e6123a645caf59e7fface4348da44fbaa41fed9627d4bdeb283124d759fa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ots-uyaidoagibajb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10521ebbc7546da459671f9ffd1c8a10b821eb20ff49cdd51e8ed5d36ea5ba88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitaluaik-don-olikaisima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcce238f033b2175b177a2390a6501d040b725285c749cd917aa185c71bcca43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-daknaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f114a0e13dc53b26a0866ae5456eb75c877103a70e2b7ddda4d75991ad0516cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-avg-dudafigai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286d228974d7a44e709bdc285b6d30160be951c7a32cfa8af83ad42f3386d7fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-fehjify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 941642d69d5979455a40ecc361c3b11f9d386929ab443e77039430e4c9ffef61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-koifi-cuidcavuaompmnodg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1802f4c95ed723ba1053d20155e28a68682c11308a2280310f3b9252a725904c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fus-ugaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44e0774f84f0aa9e800f645e71228509805731df7f7b343e7a4b72fa8f7de89e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ug-agufagidug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a0d25f8f7fc5c10bb5d41dc1b31884b0c19280d889eda98640d35b3e712a771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-avcafiaacd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2414612dab8fec89b06d3a71c4dddb8cfdbabc59274eec0caca34f8945a15bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobic-gob-gvatufagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ad99c325aa7d22b00a4f8f02cdd4677d7304c4148409e13f741d18b90608e09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-agig-iguqakaidb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 321d07a292405a7b3542cca9160b9376736797fdfb1538600b89eaa1b9220e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183049 Malicious code in itale-dci-yrtdtr4q (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7c9832b633818e2f6ca57884a0f85dcf9a2f547bf5ff81d5b991dfe0fe1eadc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183180 Malicious code in kidt-aog-uvuffacfeaaifaafiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eb37d1709808179e81f6b18333680b8928d89af94b7f68aa57df6691918e6a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...