MAL-2025-185311 Malicious code in tunis-kt-gahf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c3ef8db0d558f8fa570d8ba7e879304e7756d1c81ff24f077f0cfc80e32db2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185033 Malicious code in sonic-kos-fusfg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3095d8f97d9c55f1edf8492228c9b787088e2ef26ef18be6b65ed20601b2a6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182342 Malicious code in imodiov-kofi-cuidcmnag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27102aa3c6e7f7b73622f49a00b439ba7577374e3a5eb9e33213564de9fff72d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183079 Malicious code in item-at-labioka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ca25a155dc82b1924fea6246883eb5b4c056feb1b8ab2038734bea3908e55e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184749 Malicious code in one-kat-ibudaafrufdaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b1009b9130b9940b86180404220f4cceeac00c0cf0ca50863f52239772c69e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184802 Malicious code in poliaoz-aiksdfo-alfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 347022a93ba4cf38fe3d305a0bf71431292890ebfdd79941b8372d4eeb204933 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufavcseqinsdxaoycuuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94cc6ab69b95796217d34691099eadeb112c1af67af8455eb070fbe3ea63b034 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnyagibhghygdfhbfdydyhgui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7095bedacfb4d4c300592b3abfc4739809dbec65029a9677efc726cf7932ab29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifus-ugofai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c408080cea73fda8116bf0115e6b3c5e4b19384e51c4a86f6f0cc364e605d59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kian-avumangaffgaiab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55eabf97fdd3aac34f4386a4aa6fab4454e8f2c305a9be82c3a3702e5a464936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gisgo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd66b31dd3f733afb9fb5868c5c66742f25f0d98a885538e9d8c6dce7498b322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodioj-agajonaifau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13212b0966eae56d1dced9e6df7511a170b9ebb4b83ffaa930bec0149afa97a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avilo-civbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68f03d3a93ae2c598885dd37363241a88a780dd0b7a3bcf86bdcd9b364bbdc74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-doni-olialobna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32f546a2d905e74f501c7602e9828d933adbbfdbb622acafa01211f27ff97c6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuwabimagavl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37b45108e145129d33563ad44863c587fc555ae3698a2b3ac29f77df4ab219f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuidcmnoag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 645a72bcb9dd321c50c1bd537407c56ee86df9bc04e8b52cc85f52a93c2e227a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kg-tifuacfiffacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e4d12ee18c3ed9742867a6dd78c835088f557ec78932c011bfd89ada8507ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-uibg-uhaufaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8396ac1c021208b2f51c8aa1a0ba11af48bb8a68fe25ea7387e955f814988afd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-ugooii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30fac49223f8d78ced22a317ab773bb7938d76324cf9a59bfdf24d0ed28903bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-fusog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c7d6aa337dd2e4044a2de8d74183f09effc98e1e611a0e77d4665a5b3820d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...