MAL-2025-184424 Malicious code in modiov-kilan-avmniab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2015af86c721ef08029d6c56aec7345b176eabde43100190cbd245039fd72de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184432 Malicious code in modiov-kin-afb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec9da6fa1377df54ae66944137fac77e2e8926614865a259e500bef57791432a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181997 Malicious code in flights-lutg-oidamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aaceef0246ce25a3247650ee27ebd06b34bf3a2786fde076280f127e51d2d0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185274 Malicious code in tunis-kit-gahufaduuvufafadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cf8dfa4101098b1e23112a5b53fd323855bb5903aaf4bef902a7127459837ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-unga-fu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55cccce9c562e0787be13ef05abe15fc5c284143d486c64f21f87775e6999815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuig-alakanjitw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08d7f97074b17d7e43a3a09076231c1b7fd094cf18cad5ca2cb6ce1204b16abc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-oliuka-tamoaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52bd7b6c063bca1df642843f124538ef0a733f8e7022b16e4117664f748d51dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fangiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d378327361be19f66459d3b835e3754921c128e643a95ac70522383204ad593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kulig-tgacedcuadopav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dcde3f50a15add27a8e2cede88742122bc6e6201c6542abbefc8f1830b5f59b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oig-mopigafc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e2b1c040ebb9a953443d98531a63825e597bb324cedfed6b5b7b9e6d6d8d9e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tnadeaxwqcav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0faef3b152e4bb6e15502fa2da4c8c0368ef90810aa355abfb1c5b5d8260098f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-klvu-ibaibamuvaavafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f684b879438cc51d3a1fdeb4710691d06f668dc9ea6f9191d7e47178670f475e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-koifi-cuidcavuaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9168590beba5da068c544e140904704a265334bb2f9f42528a0bdb0f902e6b43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olios-nolibamayi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c7357b08c4f584320afb35c930ff17dda54445fa2d89ba3eef138c68c403e3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diug-damfoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a5a12237d68573ffeb4e992551fb85c49c193bad7c88f0c9dce2da9f03cca15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlook-ofe-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f9b5a7dfff6237a039094d2e2adf4b39a2bc4a3c6455d6e0c36b361b6b24230 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oihg-mopigafaifc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f3f6c31e6aaa7dee2cb8b5f48a26e9e6ce7e5a1151a0e6e6be8b3e3c167736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-avcafivaivuvagavacd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f387025f08622866d5e7d334b2064e4902cbd4f2021c00e41571444e25268a3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ijos-afafioah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fad0db5d320e176329cd15727176e57938087a605365c21efaca1fb49485c89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofeki-afahinaugai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 202f8b104a42e50a0b71b0a124efdd6327a934040798c44509c1ddf275dd589b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...