MAL-2025-184701 Malicious code in oloc-uyg-ugohfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64de33983032eb16a22d7de2fc80304fc170257f69790fddc9931df520657e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184431 Malicious code in modiov-kin-af (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4da1729bbcae4812204c9e05ab0fc873e9b9ac7e5c370736614d174912f0cfa8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuiga-alukza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae78f3017f1d48e680d47a29bb4fb6f3dbbe20742ee0b8aac53189fb838a44f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bonijavuficvaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7aaf0697d2584cf37b686e1d0e0a2fe564f79758c494df6b6638ddf362fdd8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-guga-visi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a1f20bd9cb0bc58e595f39c6399bedb6b92035d94ffa79e7a77d6889d61b1b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodija-gifaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77aba48c4653b10127992b6ea4a0159943cf54bb7addb94cbfb76fc8cd5fcc0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lfki-hakumajiausubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7acca2e524d32626d2fc84ea7b162a842d20f4683996132407e7a05c6e59af6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-omfi-cafea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 069e8b0c246b0ce71c6d558aabfcbd79400db117fa958a08e7ca16d561f957b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifush-ugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62da30de824582a340ff03d0932ebdb8c75a4bb5000a385129da6f57a2f42cfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olika-tabar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb3ce23f15fec8534e11411949373e817dc1795739e2f9154d38a224329d8162 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-avcafivaivuvcd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc225dcb5c945b05ef94a2edbc308e01e7abd3d055df0fc78f94a6bc382cc3cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiudt-acavog-agi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 968f90ea9195dd76bdf7421c2fe74a4adaa31227f502d11dcf996cca7424da6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-kvu-ibaibuacamuvaavua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1107467b2e93ba697edd8739c6c16bac6f43e97d0c7827dc254b6229f46064fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olims-nolu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 274d7755fba61fd245c22f0ac0d5de1e7970845ddf2304314c89c1ebb0bdbd71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiko-akuvaun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c98e76e3224f985426c8e459d11409a071569f75869cbf2a7c9f7d58a032ce70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutag-obolu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26cc383e1caed113fa9054dfd81fd63e10beed20704dd0fd275e04d6d32a0d1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kin-afbaufcaducxacgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 343ae45645f225363273d096f5c6ca8c2868c79e26538c5472bb517a5715ad78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifush-ugikoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281ad84b9410bdb0c19ffe282b3542e0e0f3671e8ebcf075acc61d7f41bb54f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-jab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975ceccb1ae753ee364dfbc705ca4d08f8da7d611142720a0f0c650b25596c6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-agg-ibua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1906c5bd2296005347543ffd8d5ee1b41c0955eb927fe61f9619b3bf85435719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...