MAL-2025-182494 Malicious code in imodiov-omfi-cafaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdff5dada9c8685208026a27d2e084b2eaf1fa2b7505a3a9802971152a96f1bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182822 Malicious code in itale-adci-akontolbapki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afdcefe63fe2cba0558fd0e01a9b090046362f52a9b12c4e2dfaab51fa64f9c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181849 Malicious code in avangs-olium-anamni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f65c8c228f67833417cc06be29eb0008c437b7eab9d510842c516a3ffe23d74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-daba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e1802b587573b6f642253a25cc6d9fd55d00c4e10503f8f218ae6710a17dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dabuakaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2d4addd2ad9502407b1749061c3dbdad9187f810f75a5d3c53e2ce554db6062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bonijavufcacvf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 228de940dc4064ee4dcdea3ed4d3aeace7e3d6fe1ef1553c7fc440c465e7bbc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-unga-fugiuuigfaicagiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f35f2c19e876f989fff7c0a9ccb8f18f52814e4706a7c8b9d909197c3920669a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-hykauag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dee8c35e3adecfdb7e9037bc6e2f0bf51e69bbb89854a3d9fc507898798e1843 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutg-oidai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b12f85ea45d0393cf9424ab2d9e9e9c75d9fcb204edbb3288da3917f1671cf0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-oy-giosssiosi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aa6c42efa1f3ff43922b2ff01d723d0eb5f2327e944ed033f3324e3d4abad54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ub-jafgfbaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df8f2989bd2842c5d5b5f595da4d2352d495c7eb45e6f68a2d53a7519b9e7d15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobic-gob-gvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3e6ec628aebf57f425a0d5e399a95ff29a4fbc7c185eb78c55b3bfa2a4d1456 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggmatondanggangtengdytdbjgdbyru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22fcd87f5517538bddfa758dd09d393563c3a3acb37d4cc3fca2575e8f53bbad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avig-iayf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84410c5d2207b1efec9125cb3343e392cdec0b2b4581e2f84e18cbfb51c0f5c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubg-afdmafaeu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e87fd0aa1e67be9efc3d0451bc637038455e0e3288ff43ce44aec66afad7be23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kuvu-bavoisiayabu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95b42b032f969e5090890871f4ce0940e685bfe6262d71e888197e54bc2466b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksgsdfo-ahodan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d5a50019710f6a6ef7bb9a2df3be91dd83d301a4cc4ca552c509e729cbbea70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitokoik-oni-oladinaps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35480eb2926988e512fea0bb455f3c66b6ae05c6fce380ebeb278d48cb411b8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-sywfsetef (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 582bf997dabe34de522276f541e5fde87d4f56c77bc71d2ba564e063134c2415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rryusyfsufytftt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9abdca089e375df5b932abdbff741da21b183e365c98f33dbce04dfd0f1794e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...