MAL-2025-183071 Malicious code in item-at-labieagyoka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f9fb1e7ab2cc9e20b4a6033aa2633fa007ed4ad680e086fc29bec9338d4b1e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183995 Malicious code in mitok-doni-olodagivil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c531bb55c2a7605e0ac4e858c2e6118d4f0bd65d4aff6625b8ba83680ca2376 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183607 Malicious code in lomi-ifush-ugikoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281ad84b9410bdb0c19ffe282b3542e0e0f3671e8ebcf075acc61d7f41bb54f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182115 Malicious code in gocay-uga-vigai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22936485f2ee013f0f671cbad0eb64950c7c52301ee319dd74f1fe6ed2265ecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-ni-hujikakiabalabubum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd04ed1ef68a05bc23470f7947eca3353aefebc687331d7d0f6b020c50dd07b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilimo-civufavia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e34fa4126df0dd3235f52a217d7693aa03197886498c77162149b5e3e5d00f80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-gifau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c76694eb9d3d7e264fe4203567c7b6e33889cbb33fbbf262173a9ed2111d9db4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oihg-moc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae2d948035fa9ba20a3da22db0b03896f246d346e715ce2144ac85d2dc01021b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-doni-olodagiviis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98502d6eb9efcd4f0faac599115a5a6ce0e0a21bac4ec6be56703473737808d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irher-aeswadeae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60fe97beb379d933ede7615629558a59ec49169f8f6eed790dd9ca25da4f347a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avig-iayaarfuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f57bd8e79e97f7284824e76a1dadf2d789e3788b00a803f2cda398dcc5408a56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiko-akuin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f68d35e07f03d87200bfaacd4582391905b99493bd61fd680768d269663689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tnadecav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c928f19474be5bbb1a7a3db9ad415791580838b8fe36edfd616cc5df9fa988ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atm-kujoloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8455fd4274803044fae51d2b3b49fdc3f5c34fb4e1fec7c2b7fae9e768c5cf97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifuni-ufbaceuiacfovadfhjodmux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1bf1c392b7d6f1b99604f37791fccdb16096401e4dee04a731928a478bbf8fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fusifog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4eeaf98dc31dfa6bb89df1bbcaba10b27c4682dfb451ecb1d4c9b4b21338b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-luni-huojaim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9824316a7d15211102f6327d6474e93f93860067ba369de72ec3dc1c8e9d08f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-don-olika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87fadd548aa021bf1a02103919dcd5ceb067b81889f358ac46da9f40e3244f87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-fysf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44074b05cffd1cfd352d962648b0846ad0ab4836f70d2cc7a0daba9b67d0e41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olioms-nolifau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeb6f2c40ed02a07f77d84088323fffe11e8d0238b00be2c68e578d2c094586b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...