MAL-2025-183313 Malicious code in libc-ubg-atafuifaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bcf8e0e046816fa25f9082714fcfca93fa1eb9365cb8d3a389c3c8fa2b76491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184356 Malicious code in modiov-kihan-afibanaivuvaaihid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83a0ad08f3460cef612c7463e267ede3fc39fb052f5223a405ec440493617d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oy-giosoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad7915ada3b1e55960c6b2646163e620e0a6fb23e19af0e10ea347faf0c83f34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-foji-gis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc723934af849f04042b48083282a6f0cc351a3fb155090890ffce0d5ca341f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-aviggu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a953725771909d0c597ac624c788dde71aa4414663981d9238c6ec2de38eaad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labieagyeyabbjpeoka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6939dd91f07045bf2b145da2fdb5bc125022c71a5e9ee4255cc451a7ec7c4f63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-zpjozakuika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a01e48f83d0237621895ffc23789a4c79e696832f7b557e4b5ce0aae5f40559 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fgaigiafao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a43885dfcedeb12fa4a63d6dbc5d33cfd24731a5a56462570131a12cf2d0979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-fudvtiyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71601d3122558bb98453314f1001eb7ea7aa2b5dd6276e67cfe5171a9d6bd9d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufbaceuiacfoox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e725d4f035f1b2354606547727157f7f3946def62a817e2838b3566aa95f5c64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-avg-dagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f5740f7ee304d05f3c7ae55bb0318034fde2a9447ec74bd3b4939d5cd5e4c66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-koig-tmoerocneca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104f07b568559f657a404e9834e3655907743e91802dc58d482f848fabe84160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oig-moic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1fff493bb21b5f8074af9673a67846daf27920131c871d6c6056cfb790e9a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuauscdocavgpmoigbl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f837045518ef25795d33cc61fa8d76a45bae37e904a9d6479a67c903a3e8d6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ug-agg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6b3040d937d433eba8f232cd5531f0cde46a9ee4bf8c4a21e069d3f18f5e18b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutg-oid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea48fbcef2b35d9aaefde8490a7665e0923edd5ca9ff482f47681f1e9d200530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unise-kit-bogai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 483f93efddd4f8dc252cef41dcfe9dc8d48227dfb6ad4dfb3e754593a982a330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-diakavag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 682475149d29ff69e2252eead8f2bcdc841a158958450ff54c71864c2ede0bfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuauscdocavgoigbl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbc38f28537061fd5039b7c85c2dcc6055ef5c7e9911cdeb30a0c39e974a16d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-ace (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22c986c5f7e997bf7caff2065640b185c6896b3525b5afc63f2022ddd32aa7ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...