MAL-2025-183879 Malicious code in masv-ilmo-civasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fe5fadc2eeea482ab68b89e556d556391d531c6dea1cda4eb93f1c0c2fb9c8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185259 Malicious code in tunis-kit-bogavi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57898fef6929070fe1a668ad66a7e0eac73eccbffb35ab0ba2140f5b23e5789b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183701 Malicious code in manu-oib-gias (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baeb34d3e6d75b10a18e4de89cb0b184162c1a95235f60582d886b4922657b87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuidcavuaomnodag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d76a3c13451bb868f4be75606bf02bb0379c97f834ad96ad380cff29c026b4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-ilo-cvaginhu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2483de072709579a727ca5b4be4e10328e7c3bb454687296bb6fac29de061731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-difg-diguota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b31be14540474bfc673070ae1657d30b80558ca27f03c5dfcaf6790b2a6df4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyib-givakisassuisois (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1e79c92737e4dffb2ec8076eb854664572d8614bae7fe30a2f04cadaf7dd5ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihon-afbaufcaducxags (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8c716ad011646d708f6b91fcf355f892e7a3cb7b63dc0c7dfff006ad663de11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksgsdfo-alaon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 986924ecf45b25cba7211fbdc1933a996ff7c05fe04e19d330a5010460a95d43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-ontcmi-lapikasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0729a66f314a00a16abecc568097c27f9a751ac2092e6e4ad66a287e22592d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kilan-avmnab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8ae2ecd4b47ec51e4cf4043eae78923b225e9d6e50dd76a6cb5c6d9ea33d3ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kubu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 037fe299eddac5e596eb43434e60ab3e6d0f2945568b168031ce7875fb033ff6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kidt-aog-uvuffacaifaafiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5506c1227b2bf580c8b7cd9405fbdf7f818cc8faecd237bf4e7f38cbe7b3cd91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lki-hajubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b091b2e7991c66a8dfbf078cfc1d249758f9629fb2491ae2c4bfdacd1ac5b5e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-aknkonbyunaymhentagdati (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81d1fd47b6cf9c773fec84072687662038dd4709dbb810a762bb7c38966731e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-ogoa-inubami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6677fd05f1f02aef027597bad7104a21a71120ef425e3b4ac390b5b869355f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-uibg-abuagte (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 700b608f90a70a6754efc47a30e5b1e6d283af420f38d1c84324385a61c568cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihoan-afmcautr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c1fe39378db0c48bf6c5470cb84161c8a8d5835e25868b376bd60174d3462bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbd9c5061aa2c7a094df9d44f198af6643c3f6b5d139bfa22562b8896bb69fc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avilo-civbusasofoiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47722648a83e49f015a0770ceb44ba1b519326584f4c85c1dad2edb8efde368b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...