MAL-2025-184788 Malicious code in poliaoz-aiko-akuvan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bfc3e1b658f3adbd2a7b3c13162100ecbd0852d3063f9d1c3f604e48315b635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183830 Malicious code in masolv-avo-cobsav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b46e31f5ff1ff89b7230f311a9a1f1a4a0d86a27a16aec87d9280a42ee4e413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-akontolbapakfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b59e4c28d8e43ff52b161622de727bad25057dc092564db627f4a12e58a18a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-foji-gigaiuasgsfia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bf632c663f24e30b695eef9894a8d0b800d98d30be397f49ecc535e7e715a28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atm-kujoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c374427d348efacba6764e478e915af649a5ebf8b378f8e6f2b17da1fcfc87e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutag-idobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f5242d905594609e724a02635ddc6807acb6235e372739931852fa8975ca634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-nofy-gaoigaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f57a8dbed1f47ddafff5118d5ab9f19e48e737ab7b563be1a5d28f83b2b12c24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaz-alai-yulbaivuku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3904c486d9c3a96ea1d17a3dbdc59a24ed3dd4d35afe1f810c56124e47e2b9e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-koifi-cuig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26fc1a5a45d5a0d362d8b6e0160913737528bab4d320800dd5d3955a2c46bf18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifus-ugaioi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd0a1408455abcacb4f6c1da9d0fc5e9854ba9ed547b943f90df732f46c3cc11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuidcavuaomnodag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d76a3c13451bb868f4be75606bf02bb0379c97f834ad96ad380cff29c026b4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-agig-iguqakuradidb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 800f812cb8c7c956b479a1fdc3b62de60e9db75ab149f3ac3fd4a35b778e8972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-icfaffaud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 406f3429d73e2a5479c0445107392b6f5783a632a154a890780f337205d70ac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-jygwuywuyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8caff64a8f6f6627af47b658da3b2a0d5e48a8abb1ec42c9d5658048e3c3f09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olims-noliadsdsgnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebb4713b01c79cdde264b26af63a1d04c523827c497b02395299696b6a057509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kubuskiumabika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10062d9d3525f4697a1feef5cb54f6cdc1e9f3c339c11130cfda40ba17228da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kinu-bobacun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a58972fc4107f327c8bd96daf28d40c43f7113804ad58de34e6f6e6b2bf43f32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-ugoofifai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32994b8a22ac756208403a7fdf20fe466d627649798af30250b0c13a9b56b18f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksgsdfo-ahksgasifsdusdn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421810c901015ebdea82d10b419581d6f67d4035c978b82b42d12285b7f5081b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tifuacffav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72c513ac4ba776bef214ae7f8e0e4534e0eeded011842798cf4ccac07affbef9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...