MAL-2025-183691 Malicious code in manu-oi-gisosauaug1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15545e8d5c279098328c5665ed9abd626b70242df12c384d9c3868126557dbeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183527 Malicious code in loibac-ubg-tuagaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 670d14b2f4ef3bfbef032fd90ad00a1c5299a6c299f06ed05b4978bec32014b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183437 Malicious code in lobac-ubb-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33bb10c043d993c1e246bda50b99cb06e07584d8b4bb77802db2fd07d966555c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182377 Malicious code in imodiov-kufi-cocai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3353262f2d9f56e47ed14ea2d3b81a9fa57bf37ba744304ea7d3304c6914ab8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggnru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09e3d1e42a8eb4465ea10961d1ed932987bed81cebbc6e13a1d3d18fe3952651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185330 Malicious code in unise-kiat-bogatipda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fc88eb5b7b1aa95d8a0e92db93677bab68b39257fbc81981996e09cfe0466f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-afayo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9336cf6f70d56fc0dae2d8bb981ede76df2ce3af7d96415869405831249f0cec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-noy-gtopo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2de0d6bf76286659f9c195be013b374834e4d9aee3ba39394c5ae74258d61493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-favr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af7858c82682c285822b8bd8fea2bc14400481b3d649ff1853cbc2ed6d31befe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kg-tifffaav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebce8ae7bf78b1c8351dda692279a6da7b6f9b751889430dab8cf158b97cacc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uinaga-ugu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b60fd7ef19b7ad19a499b6f31e5c6d303e8a579274c473324ef7d3ac0ba8d28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-danoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1fef1fd504755cc54dd947e0e692c717fcf43158cf3a9d18b2f34ea49d784c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodioj-agafajafiba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eeebb16745842fe5955a8d22693b0ef8b3e7a6abd86a7c441dc1553f652c554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutag-obolavuhduli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f0a7feacc2c64123d2c5f520183283b5fcb5cce09ec002b5b3f28ed27060c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofeaki-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e2da9544152e67fa5293f5b604ac324733fcd1efe4972e9854f64c727db9eac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodio-agaji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95b45ef014c387fa642cc4dfa60208860b2b767feae6fd25afd2b81af0d5dada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kiunu-bivocab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee06181df864699147a3b917d15c5807aba3b29f5cc24bf1cbdffcf20aff1af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-gifaisuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65ac7a1feba28c271283f34ee10efa6776e165be93d28c628921608125922b74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociy-ung-ug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e3aeef911cdfc42ebd90f8a22be4f0864c276fc308d159ae16da5f3f67cecb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labieaoka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9704de0d0f13ef4305b9c08c6b6ad4589a330405c7c8b29f2fbf1c5e05cf336f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...