MAL-2025-183273 Malicious code in kisut-diug-damoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2184083a18220197a3c396deea8435e454ebfb3456f4d51ad48d728fdf6476ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufbaceuiacx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb81084814a3a38ce459fd2b660ce3bf6273b24a3ff1e241b43f7354c56f5433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182463 Malicious code in imodiov-kufni-uavcseqdayaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e32d60dc7e3ce9c6e2162695681c221e5995f73660632cea63d151bb73533b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183418 Malicious code in lobac-ubb-avigifagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aa24bfdee3f8a02480b5ccaf7e982daaf39abcd6b249a66fa66f35022b2a6f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185104 Malicious code in sonic-kuig-tgacedcuadav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5ff20a5fb24f88e41415224033cb0aee6107054aa35b94e9c9fe191df5fefe2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182023 Malicious code in flights-lutuig-adisdfdglonolo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9411ff2084a5f0827e187044e29aba96973657d09b1a5b4ea71ceda21be6448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-guogogiapa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae3ae8d531627ebe3888abf885134cc3a6916f85c310718ddf69694406ea5921 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-not (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6262d892ffb0b0438d82f05f15fe6d2b03f41412a700caa5d030fc9f92b3276e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyib-gisoki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d4c3e7d3ac62eeb6ab3f1a5e5bb661ec39a6b7454209dd1bb7b386668eb510b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adcii-gnuygurygjhbkomtollujlnrti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44176e1a830693b92ec04164525a18f61e8ce1b1c3ba4945cb604f5409f16f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggrygbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e2b1aac4da139777daa0ae09baefe5f836aae07b7cb82d33cb1d94bb1e262fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-jfgaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7dfc4f51954b06518e4f883edd9b9ee4737d9f3ca85b81e3f54070a77074602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ug-ag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a9136dc2b0c9da3cf142015b3163abdbfa4eacf5584fb1f3191de2f1b5b2579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacfteagfac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5712bba25e5040f0a62b770806c75631833905bdf6550fc299d4dedb6f959c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodji-gigafoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6645cdecccb31a7de09a5f318ed73d3482150c9cbe8ae2dc4c0ff26350074343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnuygi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45ab9e04ed2aa348bbbf0f7520ca34945958f08e00f17c01ee7857cb6731ac7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-afsg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bda7ec154070d1c79c46a223e89ae53d402f1785884e7db30c605d9d799ccc70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olobc-uyg-ugiafaidabafiuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f5781cb97c128d53f47b88a2a1db6c165013590ad6242879520a3b59df97f8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184787 Malicious code in poliaoz-aiko-akuva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91d78034550589ab2490953913d67cd588979698098f59a4df61411813ae77d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183157 Malicious code in item-atm-kujaulahubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fedba93dcbf0f1a15f6b494170abae6b4a64911ae5ebf62a8a9ae7306fde8b7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...