MAL-2025-181749 Malicious code in avangi-ogolia-inualumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f5a7d394174345daac9ba53c7ca8ac328935889698ca5cc0084e8fe4f226352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183140 Malicious code in item-atim-kubuskuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ea70a458b569612e064a6229c713056dd5558289a5962ba08f9ad910f2cd6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181739 Malicious code in avangi-ogoa-inlubami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a42e2cfcd8cfceab97c68f4709c74d3fcef24e4776b6a0c04beeec8afeaa0008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-ung-fug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06c6b9d42e2d022cfa4f320d57561bfbe1c92972db32eaa526d07e1e03b2d197 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacffgteafgrcavaebfac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46fcb472cec5586fabb40319a39767fc5eb0dbd07390229f5720b5cc2fdb543d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggrygbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e2b1aac4da139777daa0ae09baefe5f836aae07b7cb82d33cb1d94bb1e262fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ijos-asanuaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5c1535152001dd1aff1fb377123162ee4c6ef03e63bf85589e5a2cc584c8f35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofeki-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef2c854c2401d141956e6fb33cdaef166c4da9cbfe115c0d4709d2a4b50abe62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-gifaobga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d9b1444baeb4f55212a864665951d5cea9e51fd6055683a1772c51528920ef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-komfi-cafefgxad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6405bd3fd31bce319776d5dc6bb77430bb28f433d03168fa72a7b447f014d39e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-guga-vigugdivai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2696d5deb232bc776a48e12d708a2f6a079b6cee58ada50ab4c6463612a0faf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacffgte (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6670a599e5ff92fb43bcf2f509b7b6e011ef95e81997e27249d507dfc6c4a05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rrsettt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8191cedda4515003228f4e351e32614bc6cd65adaa9a0080675200964b3dcc90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kilan-avumaniab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73f4bf5116f4e72a44ff2d4378a18b3061f18a8468b392c457e59114fcedc522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitouko-on-lakoikaunoaak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c145dfdb09f14feebd54df4f9bbf7e9251f56c76440082ab953cbc790fe93b2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-avcafivaivd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b747cfa4a60df02b4145084426c9e292df3db80b6909d789245e6ed309ec0604 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-d (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17d8944987f8e62b9b4d23e13855db4c380e4cd57bba6842aa7eafd2541ec6b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-omfi-cafacea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede717f74c76a501b4027ec85b4fb446fceae1148afe91a03bd6a61e616e77ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-alaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3027ac5998a588da559c0fc7afef70136851acdbe198ab7346b730e4f58ae7fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitakailok-don-olia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ddb9d710d6d39e26798f040d98b399bfd2773233d85e3a0b0f44b61330ddae8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...