MAL-2025-184715 Malicious code in oloc-uyg-ugoyui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 773dfe4a1c1f1ea3f3fc1f201f9e8b05e1638d90e95353ee282b2b425898124d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182766 Malicious code in indea-fodio-agajoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e3cdc4e0e1bec6193c4781c4e09cf83035a2adbdfe966fc9780752663884ed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifit-dabtauzai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f146f9d9b58c878ccd462a8ff4596ae93b48ac14e046474fe45627d807a2e52f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-faff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c22dd5d3c322c4534bcc3849bc40eabf535ccd234411f05ae2a2c19b10660207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-koig-tmoerocneca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104f07b568559f657a404e9834e3655907743e91802dc58d482f848fabe84160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-dfg-difzcfcb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27325955e81bcd2b59d9ecc4ddde91ccdae86dc306eb25fe5c0e9e2015cc6d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutg-zilsdsdfsgauma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5158f138419d34d6150f130f4a49f191b5af0233e7a0270840f4fac3971c5931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-luni-huojakiavuggijim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0ef52a2e8bdc19d7fd9d3719345dc9d94d1d8714fdfa9a5ee060396fb2db189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilisiamo-civuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 067637d6fe032b34ec3d509d726c48f179c94dd56febde03344266c93e3d09ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufi-comoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96a5f1ecc502ef5bd23f3d2464941d145dd43ab1c1758af213a85415fabe8b16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofeaki-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e2da9544152e67fa5293f5b604ac324733fcd1efe4972e9854f64c727db9eac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kat-iaagh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d2ce76b37088f656e5141328d7c42473d26816333a9c6f0f136282fc0b5a4f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-avcafigaacd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cefbd04cf9baa6d5a0bea10a1411d75709510a3b683f6d9945249e86a7a8ad1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kin-afb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec9da6fa1377df54ae66944137fac77e2e8926614865a259e500bef57791432a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilmo-civufavba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1fa0bbcb9afd47b6e56d904fa52072283023b80b90ad4153d168a4e0af8cac5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ug-agagiug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23067f1a5033cef5bfdbe404f959cc29f736bc9830f33411666aecba068124d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-fusiafadog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1893f30419643f2ab41912fec6eb48e901a31af973b28a4c0f06b26d542cb8ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofki-afuhnagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c93b6039be657a6d40e136618a079f01e2ffcc1acdcbdd70c3b93a7d8d23607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185290 Malicious code in tunis-kjt-garuavimas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74ef3fd8ce8d63f5990091884ddcc3df4139927ba855d1a5839080ff82770d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183883 Malicious code in masv-ilmo-civasavum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d68cc82bd2170b58906eb8b70da08859c9faf3b990e04cfd3c07d1f256e0e91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...