MAL-2025-181691 Malicious code in astam-ifukst-daiusikiula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de04f3bb88fc6fe6490d2a9e797069b73eee4895c6354c48ac131e32aa04f85e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182542 Malicious code in imuay-agig-iguqakuraduaidb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8fb69023a616a322df089364d56ff4484b961fbf68298da3e1a71ab468eb9c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tifuacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baa907b684ea26839e25114a7646a7ba78cf7acb997aff5706371991ac3b359c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-nik-hifdagujbagaigafah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbeff5254fde3508aec09a8371cc41ee27070b722269f4a85e95155f0c13c7a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kidt-aog-ufaiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd53e975e516f087656c2d74400dccab456eb8f9f84fafbd42e38d2950aec662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kian-avumanb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf77c3b213d8dccf9ff9277aeb047c8c78be2172a6ed4cc9c73d2b624a683765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubib-gafuyfgab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b5305c32fa3f3a7587f64773e439f489b985230e0b62ca90e89488431955f1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobic-gob-gvatfagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5affaddf4649cc66ddfc7c28e170b50d4c8c7adf4967ababcb4dd4aa56ec670d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunise-kit-bogavotaawfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a205d995a596dcc62e666ca040d27dfab0a5f2c7eb4c42b9911cfa803e4ac13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ots-uyaidoagib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e762cd9d8c7694d79e9970d1697694085059e2df3bb8b57c31be5949b37ca5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oc-gua-vsjfahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e62869c92f484eec09e6f5a960f3fb7758eec535bea1acf55475d8b2222d7299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihon-afbaufcags (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8300b0451a3ccb3e98fca4509598c5bf40d664a3bc0bcb88901847a811a0154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-aknkonbyunaymhentbangdati (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86fe6959427756dc9d653025da191e66a6391c9b18c3a20f8cc9ab2634756fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kg-tiffav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01b9307554b544d9058daaf9cc8515a62843981a9a279dbb15e57e6abad638ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-don-olikiakbama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7975f26cc764fe56e3ae88e1ec87f3212550bd459c5a3757664609ec8ff4289c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuloig-tgviavuexe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae4704499b268df01d82e8e5775ebb598190127f353797d4dcb74fb3757c234c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181926 Malicious code in flight-iltag-ziuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a74cc82227727b826382d1c37b7f77c2e152c5819764164f3be0cdd608ab2a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184385 Malicious code in modiov-kihn-afbaufcaducxabncmags (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ded9524ade714ec166d85b96bd398702cb39598da00fb421e5914b02d1b884a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183076 Malicious code in item-at-labika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80218d43debe038bae4e822a495618aa2fb4ffe67d4c10ed73fdf29524ae6521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183114 Malicious code in item-ati-zpojoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bf1c5816294b8b3168068b4cba373487fca2c8069faee8cabf01b7ae156d77b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...