MAL-2025-182364 Malicious code in imodiov-komfi-c (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88c3632fcb9f0beb2c4589c9ce0ea54b31762013497afd843470ba3834b296dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rsgusytduet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba486481c94ae67075ed34706194b26c35d4116cad8bc7dcdc71bce98a20f482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181800 Malicious code in avangs-olim-anami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc86d8fbcd6b6ad9c894abfa5c9a4b2bdaaf1a2d6053fb18fbe6db10dc326bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183085 Malicious code in item-at-labka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87745aaac0357ce2091df305d10cd849015782459c4c10a20face3f7bf597d12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181713 Malicious code in astam-ifut-dakakuioba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8371d659916ed8b84c9bb783870adb27df9d3507e8f3765b2769cab37ed1d28a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182125 Malicious code in gociay-uga-aggf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e2b07d4c22c5981e9e29cb7dcbd5a347548287d5f6a2ea7485dfa6f6c51c7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-fudvitifyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 811eb04f5c296af8d0775c0287aa1c35e7a9ac2bc0940df219cd502dfa0aefbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irher-aeswasdweaddeassaedeaefedeadedefredafafaadde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60204f96f22f6598891bdd615d6d258a4d6e6e06b1e11b4ddea55d6e7add369a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggpantekkktoyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5a72d7afd022ce0bae90eb2f2e5fca309e7f9faa60864e43c144a1f51237633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kulig-tgacedcuadojaepav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0352f621d3af13b88b0127eeff1aa5ab72c74691ef61cc12a25c8992b1b2cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oig-mopigafc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e2b1c040ebb9a953443d98531a63825e597bb324cedfed6b5b7b9e6d6d8d9e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rfrttr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3a0647df2f9cb098e344f97eeda7f412f9a22a5678e0f46cd36c7ff164312da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggmatdnru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 573632d42ed22425fcbb1320544b205f57950153e42e2032d7afac363db066a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avg-diuj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d15d80367250d1e6343271d97dbd4f5905ae76223a6e5321f8da4e8138d68e0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-avcafivaivuvacd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff302f2f2037bf181e54559dbe7655a5fc32356521d49e238da58eace14fb59f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuauscdocavigbl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 584249d720f778abc1da96e0e565d0b027b84ed15643a2273de6fc51f04d6bd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-uhitaggafadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f2928dd2e441f6e124ac61cd608ce2e044c4fb26cd6b32daea874923a9819e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184427 Malicious code in modiov-kilan-avumangafaiab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ee476e010963eec4612fc86f9b191bd9f06e4c3b7d361ac10ff6ea920ba7a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gi01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 617f6fa36ba308e7bdbc97bc6406707f7ea2923939c7d04ce22a91314f38983a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182992 Malicious code in itale-dci-jyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cbb27a9d3956e36d1909c07afec5336a9b793444119f34985110398499bbe1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...