MAL-2025-181729 Malicious code in astam-ifut-diugoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c571bc04a0c0fed293083853cd0df569946c384eedfc87a36c49210495c0664 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183598 Malicious code in lomi-ifus-ugofalia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e49f85980110fcabf1d130f5057ea19c66934c1cbcf05a3dc59c95fd1ec28d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184870 Malicious code in sonec-kat-fgfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a832ed9f5989ac9ebf09a92688ff51f717a666b43aa7259c907396ddb6b5ff53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182669 Malicious code in inda-fodija-gifaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77aba48c4653b10127992b6ea4a0159943cf54bb7addb94cbfb76fc8cd5fcc0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ijos-asanuoaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 566d94f63c8b668556facea60c9b7825ee0c6d523ec6deb6bf263e472b060b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiudt-acog-efbag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8818ac6cadaf0d9b232c80556e871e535cfaf65cd344e0c270771205583ddde8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutag-obolavuhduli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f0a7feacc2c64123d2c5f520183283b5fcb5cce09ec002b5b3f28ed27060c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-ilo-cvaginanavcuovhu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25197fda80a96f611dc968f98305b34ad3ff8e7ebef2a36da1f418fb6844f650 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-fudvitifagfyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c434037e1504e747120a01614ecdfb71c8387f3b519122eadfdb4076701c44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubg-afdmafaeu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e87fd0aa1e67be9efc3d0451bc637038455e0e3288ff43ce44aec66afad7be23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-kvu-ibuagoufavydauacab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb3e18a40ae923fbe3c49040521b72160640a3310c665ecd6f6a636f04611817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksgsdfo-ahodan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d5a50019710f6a6ef7bb9a2df3be91dd83d301a4cc4ca552c509e729cbbea70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-kvu-ibaibuacamuva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector badda2c6a7806226994f65eff75d9cd1a4c482208e31c8f32a59733625ec5fb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oihg-mov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f47928018fa75183df95ce01bbc975bd76116f6c00eae15241847b03ea6d87c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irhar-aaeasdeadeadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aea8a7803646ef854595ac44ac3c5d3240b816fb8a183457253ab2b515bb4864 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kaos-fagfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d96e7e46cf201f2af3ad308147dcc651e487f073b98e130848317e0732d395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kian-avc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 796cd89360bdc0f721879daa60d63c05e1216b80a0ba098e36ee739dc784fc9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kuvu-bavoisiayabu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95b42b032f969e5090890871f4ce0940e685bfe6262d71e888197e54bc2466b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ijos-afafiofiahah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 923e8584a2cc29cd5bd381130b002a80151be95eb5901297da20acf91f66f974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacffgteafgrcavaebfac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46fcb472cec5586fabb40319a39767fc5eb0dbd07390229f5720b5cc2fdb543d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...