MAL-2025-182215 Malicious code in gociy-ng-ugufg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9584fd1a218d3b428069ffdbfff4ecedea8b6201d75d0e1c2b2db0773c663d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184756 Malicious code in one-kat-ibufadaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 124cd0277d86d0ed84dbd873174bef02275d8949088bf4b58ef5cca233dac20f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksdfo-alfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 347022a93ba4cf38fe3d305a0bf71431292890ebfdd79941b8372d4eeb204933 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184324 Malicious code in modiov-kifni-ufbaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd32727c34463213d57af8b0e289db4315befa3580c526d9905b6c5b9103df17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183042 Malicious code in itale-dci-ssetgs5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4cf6b97d6908918c21fff8904793446f2d63c2c7f133b3d566dc8164d9bac24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183357 Malicious code in liobc-ug-ayg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2d20724b71a135e1c215834a57d8a36c2e2fc76ebcb2c00098caef513567774 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutg-oidabilamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dfb33e6a1428dc34dadbe616dd9c742f989f28e639136c2167239ae12cda4a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuig-alakanjiw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea7b2adbcc7346bb432a536f02ca7adb71a620b60a4a5874d8b0aa445ea61990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-alonalia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 071d5873f87421804115b4fc4009dc6edb7c0f2473984e83aa7f1185676a2824 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182005 Malicious code in flights-lutug-adibalonlo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 013dd0c86bcbfbefe091802f5fdf866eb41466f19433859ae06a03cf0d4676ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diug-danugamicafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd424fa3175799b9720dd7448fd48ea5ba2796bbef5743c4b335ec2c7c7f49ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in asta-alikif-daka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f9fa2513e8f5dc7b7c516a786806b4ccf7a49d8bf782d99ab100708d8790e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-ufavcseqinsdadataycaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29c9e974dd9a465b892754ca481f8ca22bea76102748143869706242ace56eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184980 Malicious code in sonic-kg-tifuffacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2037bf464454f993c28b7464e5ff98cf9d6a142f8377c888fa46990c9032ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuidcavuamnodag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4123cd92701bc7f3b78afa1d259cafe4c47f81d88223defae0282bed5b487d40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-uavcseqnsdayaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a13673ae3b6d910ad099df968367f58b331b0cb706573a0e8de149196ff025 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irhar-aaesdeadeadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5afad523c4a98a45648bf6a95e3fbde47d2deb71aa75ab09cb025b5862ee218c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irher-aeswasdweaddeassaeeaefedefredafafaadde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5252760cacde093abd6c20719c8d40ea80ef095edce87dc1a96a5bfea25f577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacffgteafsgredcadfacvfehxa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e54a4596fdc03283bad434d558a353034ac41cfb68068f643fcb2a0925e53329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uga-agidugaii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d37dc9e7917a5b9ee6492ecaab36ba6c8a0f7d3d29de0705cb49d5dd2de3b00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...