MAL-2025-184165 Malicious code in modaiv-klvu-ibaibcamauvaavafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 923a73e26e2d23bc8b5ec041895f0b41a481388ff38374362458af8d0cf43485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rrt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e8709e2ac0b6d800feb0b77efe6c09b1fc13adf2c83ad9a3faa4534e5458c79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvog-dnieamfn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9d82878a3aba3f1d4b4cf044be0e0f1a0b3c695ff53ab34bf7306c950886d9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dabualikabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 515ca68d459ef3332387bdf95d25826d11caad6d4359cd253e259bf599a17a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-aufb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1977e69d97b88c5beb3f89fc181ce83abba5f00344ac4d2db755ccdfa049bb61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-gua-visagigojfahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 082c48a92d97c7e0b955dce7297fb2a4a7a633d356f892edd79e22600c057e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kiufni-ufavcseqinsdxaodataycrptvmaduuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edb423dc6fc06a261e004067c4b3d48ebe7235bcd4f093153c5381dc2d4d7d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacffgteafsgredcadfac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21210de1c5830e9ba5fa930e614f9d10f67e9bd99db54ac13eb87fcf03e5c72c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifit-dabzai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9079b408c8588105c56db9d5b6f660fd8dd844abd6ad448e4620f9c83670e7eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bonijavuficuadcfvaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e95f787eb41af8583d91004bac9d809547aae1e5324844156f6944484e88ecce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185102 Malicious code in sonic-kuig-tgacedcav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e37b5ecb542a413c9b8b727f4bca98f634eb0b792f47d6522997f486487b947e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-fuja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d95384840bc4773dd20d353d78126694333d3611d4de0435719e0bfca43ba384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uinga-ugugfgafucfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91856128b2a0f8a82ae49024a895475cd0ca49437e2036a06cb54a9366f548d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185275 Malicious code in tunis-kit-gahufaudi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc96c25521fffc2dd128535d8cce2bf0335b553a049798c82f5d93b564105f37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-icfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1828c8f3887e4d9dfbfca8eda7c3c89cd20bb9e31cb5034d43bf4006a79352b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184404 Malicious code in modiov-kihon-afbaufcaducxabnygs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b93fb3a6f5820ce95d95b13257c1e23e84b9ecf13eb286060354eab6ad12dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labiomizazkapa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e70ed568ab1e8723700eac0bfd1a6505da65ee9e529cf05aec7657f1bc1ca28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184752 Malicious code in one-kat-ibudavafrufdaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e54d0b2aece1cd2107626f8ac0bce18b7fa78b6c41d1012cc928aef315f08aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutag-obolavuli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e079b68dc56bdfa9ffd15cbe992e95dd06d20797534d15bc0cadc39c10045f9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-agg-iib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 537c6defb49052ebcacd66a72fa3c8256df642c5e7945294c70fad98bf07a084 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...