MAL-2025-184392 Malicious code in modiov-kihoan-afmcautr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c1fe39378db0c48bf6c5470cb84161c8a8d5835e25868b376bd60174d3462bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183469 Malicious code in lobac-ubg-afde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69632ec517bbc21680ab1bab6258aaa3f6ec0ff319071dacd3613c9c37700431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184907 Malicious code in sonic-jos-afisigaffafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa4901ada9ac753cc8a7f7e3f914e73886d77f8f4a7800e27eddcbe91fface31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184188 Malicious code in modaiv-kvu-ibuagoufavauydauacab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a36c8c171a9c82155d81f432783f0b9f60e07fa49cb9e2d6cba3175da0df782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181802 Malicious code in avangs-olim-anaumini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e4408bc82adf35cd61cbd01905f91678c8966eea3fca3b46bb2481e87880e62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-agig-iyucauaugafg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec5110549c90735003ccf89029f171fe9c000e134c5167da507d77e55aa285b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kinu-bobac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8344e78f61193872306260e62e6648fabc0b82ca4615dd652d88424e0595c75f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-daikila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb054a3059e3b12739b8c71925ef7a4a79afeb64b7cf42dc2a27bf6971d6d4e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnyagibhghygdyui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbea887ffa500e33cf0f11a4bffad3485306217c6eaf49d2c9de357ce74c2690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183903 Malicious code in masv-ilo-cvaginnavuvhu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8edd46877154f91f5766c78f9252491faf027c0b0912ea44e2fc518fb1baf80c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185121 Malicious code in sonic-kulig-tgacdaoav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 146492dedd7afb176d7ed24b5783f7050fad94e941ec631adb2c68894f6d2360 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyib-gi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6edee0ed8a3aa1dbc2d76b49751a9682c7fa4e960843d6cd83e4a948d77e3d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kulig-tgacoav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbdbc45584e7ea9f4ad817d8a84485291791cf61318a8da323dd938a94199fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-srtrt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06f872e197eecde6b663d8ebb54944c8340688b215a2842af02d926cecda5df2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-uibg-uhfaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eb9f53fd250b01f99b84fe957bd0216fb521e550c29f1c7c904c1d59b4ec716 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183265 Malicious code in kisut-diufg-diguafuavaoatav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3135752c986bb42b3833f73afd859cb408cf86fc23f8b5804774d0c40a871303 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182634 Malicious code in imugiay-ajvog-dnieamnfaiyugpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4fa6fe12bf45d08c1a825d80d1c1c4d52076a0f8e8e34d998efaf752555eba4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubib-gafuyfb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 923f22842c56787224a76dd5e83469d88490e6b22106b6d05d232027af7f0290 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutag-obou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb536bcc403edd62b5ed41edb6ddaf7f65235823652f9bd4bfa97b15a039f93a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-fgfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a832ed9f5989ac9ebf09a92688ff51f717a666b43aa7259c907396ddb6b5ff53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...