MAL-2025-184697 Malicious code in oloc-uyg-ugaoyugixafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36d1db462f9c42ed7b43321830fa159f3d4ee6d976f18eb6ce86ad6a2537f8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182881 Malicious code in itale-adci-ggryuygbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc14d5a18ddcdf6db49ad6e8fff085af20cca43075face3ac2c3015bec7b4241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183828 Malicious code in masolv-avo-cobsabubasvov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a4ee020189702e7b97b408b9acf2d218fbc36e417269d034fc181b8dbfd66f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181775 Malicious code in avangi-olika-tabao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46c507594cf3f7aa66f89ef22f67f61eabeb449b035ad2a26de3dea4c85395ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avilo-civbusasoiaufoiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 329a373fd502259ca1193d6178acbf3b576ff67bb0fc5e8e9920d16d8310bbf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-dav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e31157b8fca5acae27e54440153052740468031f94c695d1acd9d5388731f42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufi-coci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73a73129b4de2ea0b739562ff7ae66d506d69e67d809287f1a08b03443f9d17a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kugfi-cmoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e9c44cb3b10fbd2b29eba2958693204100386e6624303b36d0b72945ec379e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kulig-tgacedcuadojxaepav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c043f503efef1b8deca67f95429133269fa09ad85cdcacc32e9036f64afd294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuauscdocavgigl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d81e56bf80ed3f81d13561ecede4f8ce432c2472565505e9c8146cf340d05ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-difav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80c999b9aed165b620acb2879d34b94b34bcbc80f2a42125b86acb3272a64769 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dabuakaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2d4addd2ad9502407b1749061c3dbdad9187f810f75a5d3c53e2ce554db6062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofeaki-ak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b55cf4296f17a024700d1f446ba4e41a33842e49ce832a6bede0b1b0c1c25661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihon-afbaufcaducxabnyvacmags (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f606e0ec377b3564257e0d8115c38655f218daf98bf9e0ae433800497f75bdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ug-agg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6b3040d937d433eba8f232cd5531f0cde46a9ee4bf8c4a21e069d3f18f5e18b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kit-gahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a84de994ae4925e86eee873c3e8b523aae9ac07745ccb7ca2ee9b2f086cd403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggmatondanggangtengdytdjdbyru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff46ca8a0a825dab2f4ed2e64e1f6c1320fb51bdff41a8d05cee45f6529d4256 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bobacuvolavafin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4d5b1ebe95593e9683cc2e31bb0158747f738f5b7787695f8dc8047d8cbaabc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-favx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a000acaf97bb79d327ceeb3b7915f5276c51977b1335a385c7ea2d54cedcbfda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goiy-ng- (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a289049f72316df99cf0f72b6e1c93653cae13b750758873e84ce83f6020182 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...