MAL-2025-181899 Malicious code in avarag-obis-balmila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c1285e03949a00565f1b084593ff126808a620eff8b9895f6afacc7420c9c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185096 Malicious code in sonic-ks-fuja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 996b469a65fc376f41c23dd2b9185027fef2ac56c29008fc0a33bf7e71094c3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183621 Malicious code in mahnu-nofity-gami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae35ef0cdb412e48c5e641978ab4e67693914eee7f5d0c188f13b5ed87ad040f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kubu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 037fe299eddac5e596eb43434e60ab3e6d0f2945568b168031ce7875fb033ff6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-dfg-diwfzcfecdavgcab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe2f0339a81ec818e29743546170ff2d8688a53ed7edfb06ea9d65fb3bb0fd4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-akif-daliak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff8f04a15dffc3a6bbda7e747b25f91878ae0cc2fbce80e45579f302f28d70aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fangsso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4d5ffedb1d607f05ed04954e46756f409d3c871fd0fd8cbc3f66707369efd05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in one-kat-fidulav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f29a595f5104b95d47fbc1f536347d80ea325d84984718623812365b0f0a666e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kin-afudsacz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bf13d5370cacfa092cc755016ea4f3a9209310fc0bceb6d8af02a93026cf7c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-ugoyughafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63f16edb1ea27d2f287ebe1691102dc17aa2fa3234d87e6b2beec63402dadbc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liobc-ug-afayafuycig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b0a6acdacd00e92ac314d37f5f4767ad48afbc0d5b961565bdb68c7cf4c5ae2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutg-iduhsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc81bc8c1e35d832ca284c41fe3192c0bd625938ccbadab47dff9f5c91a5555e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-ofi-cafacevavmolcabyca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ed81abfd2ccb471c8b0d052fcf1945e3f8fa4264c938dee03ef2f445e3d840a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-gioafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e4180704dedc049a6b6244c2515ad52263c6e924f7b970d53b827d33fc4999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyib-givaksisois (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 777d8292df47179a724e8fb7fd4d389458e9dc34c2d3eb0f650e58d48dba0a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avg-daiugadajdufij (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 154dc4515e09c9b27e99c257df7aac1b5bfe94d6481dfe6332f75e88aa281dc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-ontcami-lapikasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 962969005951cb082def08faee126a0010e2039b8161d3bf02cd208bd13b5686 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyib-givaksuisois (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6339db5bbb096e635334b1f940ff60654b0a0630d2d0c377d34c7c82f57b5852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-ilo-cvaginhu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2483de072709579a727ca5b4be4e10328e7c3bb454687296bb6fac29de061731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-jyhfr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30f6ac4ed6fa294b92b53af7f1e0d25b2b9a867da788cef4b7aea6755263f0ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...