MAL-2025-185337 Malicious code in unise-kit-bogavi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df1e9f7fe755e50439044873fa2790218cc859a9f306ab853f68105f2350652c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183006 Malicious code in itale-dci-rfsfrgdrget (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16500d145160e8a515ad7d3a465bcaf4fca3bca1eac2d19ce78adc2a3ae688c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181743 Malicious code in avangi-ogoia-inlubami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4af30e81fef5fd7965307224cc0e576096634eeb3046a09d4c16d42d4028a76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182107 Malicious code in gocay-uga-agidugafufyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27f4754a1edf27eb0b3fb7470a6b8886429dfcebd232bfd56230d08f05b77906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kinu-bivocuab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e132a38fc1a3591f68461543611b671b7bb54fe150cdecde7e35330ec45a7763 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-digokmiuaasnla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb590d84951f8fdb5dde8f11d1ea053dbc65b7294b7003ce75922284e47a385 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184535 Malicious code in mokok-lukaunai-haj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d4b1386885d951c9c71cc162631b2d3b70a9ae9c36b0fcd75b2dbc2ad7cf34e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofki-afahiuugi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dbb54ea5246dd56ba7b4bf9aa0f322b771eef6244d3b1c091d0d9fbe6c8b1dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183734 Malicious code in manu-oy-gioaisioasloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1b31385cd2cdad666d5a9539262050e0c894b6aa5a4cf548a0120adc415ef87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181876 Malicious code in avangs-olium-notari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3efad07912f29e1a535e864f53635c67d1ae4e7738c8d2b9bb085e3a1dee41bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184842 Malicious code in poliaoz-alai-ava0ubu0ku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23e8c24e6157166762c93e9abf8d00423a21f73d462b1c4ff370e3091784b4da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185140 Malicious code in sonic-kulig-tgviave (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f465988c7741c5cdeb8cc7808b2ba7d42b3869c8b1a1c1ab0cfe0a034fc7cda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-ontcami-lamokoina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 745f4f8e0841b9ece9530aca36763c3c2d14433705b2cfdfc02dffeaea0b8fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182085 Malicious code in gocay-guga- (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b065cec2a5b1113e9792ae85cb0380920eb18f8fab57ba6aecd45c20312d200c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnuygugjkoujnri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac0ae71072173e36dc3e437b306323b5a17367daaa53a9f0d4982dbc99734232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183935 Malicious code in mitali-dn-ujokuluaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b32d39bf5654281f0c834f9a90367f5037efe91a3d812a21a0aaf89a1200224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184058 Malicious code in mitokoik-oni-oldis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3938b2f5e157a209e749ffff3023a3ed5c36cf832e206fdfd99c5fb955e1c7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacffgteafsgredcadfac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21210de1c5830e9ba5fa930e614f9d10f67e9bd99db54ac13eb87fcf03e5c72c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifush-ugiko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af537ee3a51b73950e8d4ce70be057b35634b8c10abcf383d3a3f82f0e71ac09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labieagyoka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f9fb1e7ab2cc9e20b4a6033aa2633fa007ed4ad680e086fc29bec9338d4b1e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...