MAL-2025-187866 Malicious code in loop-quito-hyperion-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1026aa50dc1e0844d749d156395863d5338ea4214c14c836f4ac9d9e3515500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188749 Malicious code in plutology-ariel-subscription-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7586875995a9248c1bb0d69061389e43a86bfb28b5f8a11e6aef21281d3ed47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-zpjozakuika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a01e48f83d0237621895ffc23789a4c79e696832f7b557e4b5ce0aae5f40559 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avig-ijimaumfaatugf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca8956b5ea00e74ad1386290bf89e189f4c5c2f97452817cc6e6835a4363d3da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-ofi-cafacevavisvoemolcabyca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 962607cb45586f2764eeea9e30e1d283b9636cf945d3d9cc828b964090b7f75b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182341 Malicious code in imodiov-kofi-cuidcavumnodag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ed8ac77f16aa69a603546ff70c350dc9d677c24c884378e49f7a61cdffcf99e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184329 Malicious code in modiov-kifni-ufbaceuiacfofjox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4071ee885db2d4718df9c4fa792d5d2125823638f33a44b0b9dfd8600f20c3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184209 Malicious code in modasiv-kuvu-baiucaufabiav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8f5688c2914ffad3f40e1ee5a781dc92fb59dbb1639935a8bd4fd1ccb19bf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rfrt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8081936317aabb1d804cb6fa6935078fc970eaf224cd64c6896c3563bf751fba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dn-olikmua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf712eee3ab873dea307e16922050548651a75b7a6ad704a6f2c728fb430cc2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihon-afbaufcadgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b541cb764e24880fee7bbd1465dff38717ca640fb7b6010f4e86dfe4490b008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiudt-acavog-agi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 968f90ea9195dd76bdf7421c2fe74a4adaa31227f502d11dcf996cca7424da6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182017 Malicious code in flights-lutuig-adilo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44d21a343d17ecb73b8c135feedec85366f60e8a72f7f9c8772da8a012a25f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184835 Malicious code in poliaoz-aiksgsdfo-alon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10c30f0b6f20cc35b602fbe7872a2b8e6a8cbb405355a482cb3de1546766b54d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-foji-gigaiuasgsfia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bf632c663f24e30b695eef9894a8d0b800d98d30be397f49ecc535e7e715a28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilisiamo-civufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7b101c3d14bfc442595534c8d7c30fde3deb9c449d0a6ab664ca6110635d274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-inlutag-idosahao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c02ae108d31860db90b1a0afde180c30cf4dab805820670ff7102c739951b17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uinga-uuggaucfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b1d6d301b19e3831792a0177984fc801fa47754d9d7df51ceda15ce20993cdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183120 Malicious code in item-atim-ku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86b69c3dcc16fdf9ee876642a7dde0e74d202652e098c76bf7f4712eb37dd502 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182772 Malicious code in indea-fodio-ago (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 023c6224346fadf88269213bc36d3cbf7542eeeee6690cc66c6a69e6f2233e3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...