MAL-2025-181970 Malicious code in flights-lutag-obolavuhaduli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 287c45c748bf11a549c6361ae5c2996f822777042af00c5f93d49dc66ac3e7d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182748 Malicious code in inda-foji-gisagabuilan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7be9a828004e557fee23f6837edbf9d1a7c160352e4eef6395a386e6250a4c10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183388 Malicious code in lobac-ub-jfgayuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88d79e69bf6256cdac226c5fa8ef6d19557aef7d7441d83c5ecbfe7305f89ec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184748 Malicious code in one-kat-ibuafrfdaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c9d264f5362090b3425ac89255df54d8f3e6a7fb7b1787cb9591e062d3c22b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bonijavuficvaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7aaf0697d2584cf37b686e1d0e0a2fe564f79758c494df6b6638ddf362fdd8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kulig-tgav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ca74ed0f4f77b67b1246ce51373fc8a7193c051ca0d8bf024f9dc3d85f8f292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-kubsiduzika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb2ee9b474ef56b2b57e4202f75f54df2add22513d910fc2d28206832193e66e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-dfg-dufainban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d39a215037ba9be96e617b4b7971930b8e617829cfd07e0db9c318443ff4002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyib-givaksois (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e1f8871b1e8c54c224e6742eae3abfb9a431ced856ffc104eded2a144108f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-kubika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14f196745cb20e9640cf03e468787371d2d6a4ac7bc4bb10837c7b047ff3bdd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diug-damfoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a5a12237d68573ffeb4e992551fb85c49c193bad7c88f0c9dce2da9f03cca15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacffgteafsgredcadf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 516f537aceec6c23deab6bea2b65ef7cef2529420b1fcf10c1693854850e714d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ijos-afafioah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fad0db5d320e176329cd15727176e57938087a605365c21efaca1fb49485c89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avlo-civbsoifaufoiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85195e1aa88690d6f168a539e3635f0963eda3fd074d4ee6fce657e85129e846 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-jos-afisigafifaafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0461462cc718f1b6b5ca53af4a9511e0552961d93cdda85ba4ad4389b966a835 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-avcafivaivuvagavacd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f387025f08622866d5e7d334b2064e4902cbd4f2021c00e41571444e25268a3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oihg-mopigafaifc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f3f6c31e6aaa7dee2cb8b5f48a26e9e6ce7e5a1151a0e6e6be8b3e3c167736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-au (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 462702fd1215bcb8c3180ecc922164b64d4a023352f90f4b018f1c7250cfe8d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodija-gifaobaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22585ccb91ff371193a21f7c2f0a3e2b0777a0a5befdf5928fb1d5bdeb4e80d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-aknkonbyunaymhentagdati (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81d1fd47b6cf9c773fec84072687662038dd4709dbb810a762bb7c38966731e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...