MAL-2025-182927 Malicious code in itale-adci-hykaulaygkusytang (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55c1da70a7c98da5c8ca4b711a3fe5dd0bfe59d01f78e714d00108ce8debb944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-fagiufaugafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0f0a9ed086873fc435188d942239033453e5eb56450ac1f281f89b17170d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-ali-ava0nu0ku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf0d1ee6455358f77f62a89beee65196d91078a3aad2ecb3a73fceed4e957d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183578 Malicious code in lomi-fus-ugaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44e0774f84f0aa9e800f645e71228509805731df7f7b343e7a4b72fa8f7de89e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184994 Malicious code in sonic-kig-tifuacfivaffacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 591dd64584291580f26664df33b5fe4c55c43142d65c7ca348b2d6e1000e6fb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-avcafiagfavacd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53135e73c490059198854ae98d7a7a06dcd674aad1cf14c88f392ceb3729d2d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cef408d2e90f68bbeac7d3aa26be4c7cda8dd1f14c5045711d147046f245fe87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-yafiang (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95b8c921a1257fd724917b4f9bcccbc35f585ea7bcc744938192d9c7bccaccd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-danuamfifoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aff056748d06beca965ba808bdfd3c0a8f0a388ce194607a564374147d78a51b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182144 Malicious code in gociay-uinaga-auguf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16af38931dd6492a7318bc20ac168961864e8ae39dc5bfef3ed86624c7488cc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuauscdocavgopmoigbl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3381a65895c92970c2afb34c013645552e67edf4afaba3fc315858ce52be965b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182498 Malicious code in imodiov-omfi-cafacevava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a722197a6638173077c8604159d553e1bcb218368815aaee412c61bb2eda83b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuiog-adifilo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc62c47e2d83b3f8f07afffa98b858b0f25f47d75faa8e4429b0703d560acd8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-aviggu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a953725771909d0c597ac624c788dde71aa4414663981d9238c6ec2de38eaad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lki-haji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b7f3e72a7686c18b0785f8a77d3edbd6f3de94e2136207ddd219904cce148e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-avcafigavacd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5ff7f58830db06624ab14a67732940d64706d3444f66b9fffce1ea72b36fe30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184689 Malicious code in olobc-uyg-ugooffahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7af11a758175255c4de58d55a66c1d7550a96ad49db839232007f8e91ef057d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuloig-tg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 489a9d24c64cdf7cf66536dee312477396bb4050872a42a5dfa0dd511269caf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/batu14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 556315d4dac40b791caacd193c7c338ae51060718731289dbc725907cf6eeb42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181341 Malicious code in @akunsansan0/susu6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22311b399fef078c6894f01fb4e29d5923ec9ed74d5c8d473347b6a6e185779d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...