MAL-2025-182758 Malicious code in indea-fodij-agafajba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb37b7a9549b94fb88d09e97d543d390ce8f43a4a06ba8656e9b48ef593432b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183140 Malicious code in item-atim-kubuskuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ea70a458b569612e064a6229c713056dd5558289a5962ba08f9ad910f2cd6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184046 Malicious code in mitoko-ontcmi-lapikasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0729a66f314a00a16abecc568097c27f9a751ac2092e6e4ad66a287e22592d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181942 Malicious code in flights-ilutg-iduisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a315906dd4c81266b4b476d40d475a471d83bc7723d47d7f156a29ca9331735e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182608 Malicious code in imugiay-ajvg-dnieamnfaupa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b93999b4fee9a350d349f3be5416709e6fcabfe9fd43c4002a43980f3f1dfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183429 Malicious code in lobac-ubb-badadfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6158505cc6bf6fdb67694f822d74ae234619a285cb80036746020314580eaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-fidulgaafucfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 102ac9ec2e79a1fc4dffbe89bf2d8d591fa916118989beb150e07950bd4b16e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-unga-fugiufgiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 095f060dd602a7c7958442f64e38d45d7d5c0ba3efb74243b74c76c7bc01c2df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kaos-faga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd9db1af913ccc883dc1136045eb4e6bfb6cbb618f1b8ce78f6cf8f0f1af76e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olobc-uyg-ugi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 702c607f856364ef61231ec291c2773707158270e83a8a93a109bcc88639aacd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-don-olikma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b98bd63ce5f1b309d6782183d3b539fe56d3f12ddb6441ecd48dc1a7de2c82a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dn-olikmua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf712eee3ab873dea307e16922050548651a75b7a6ad704a6f2c728fb430cc2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kidt-aog-uvuffaaifaafiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1e452280187cc62de1d5dab0d99faf0edd14a63cd13a8624a59a5f830d4abe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-koig-tmoerca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11645ebb28b27528b4098ca7639a36cf7c91caee61de9fcbba78cc8ce0e639be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-avd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc7546b8af6e3dbd01a2401041a63aecc4fc446a4a181e716bb8c0752093f870 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutug-adibalonlo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 013dd0c86bcbfbefe091802f5fdf866eb41466f19433859ae06a03cf0d4676ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-noy-gtogapo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3693dda8ac96299c2c24e25646fe9ebcce5e73cad9ced5cda6f576e6dfcccdf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bobacuvolafin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d1d4768a3e0845bb0f0807740cdb6d4594db1befc93475749a64405cb1fe188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-ogolia-inualubami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4e2e44e7f5cfbee56d522da08697fade27491250de94613f8f6bdc9625e4829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-gua-visagoigojfahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3287b48b3f6ab20225cca321e3550b6557debb010f0cfcd053229d27c82db867 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...