MAL-2025-183527 Malicious code in loibac-ubg-tuagaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 670d14b2f4ef3bfbef032fd90ad00a1c5299a6c299f06ed05b4978bec32014b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183437 Malicious code in lobac-ubb-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33bb10c043d993c1e246bda50b99cb06e07584d8b4bb77802db2fd07d966555c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182377 Malicious code in imodiov-kufi-cocai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3353262f2d9f56e47ed14ea2d3b81a9fa57bf37ba744304ea7d3304c6914ab8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggnru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09e3d1e42a8eb4465ea10961d1ed932987bed81cebbc6e13a1d3d18fe3952651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oig-tmoerocneaaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1957a6fdda7185cd38f3d00978f47308dd2642e0acbccbaa735829352358393f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185330 Malicious code in unise-kiat-bogatipda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fc88eb5b7b1aa95d8a0e92db93677bab68b39257fbc81981996e09cfe0466f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-afayo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9336cf6f70d56fc0dae2d8bb981ede76df2ce3af7d96415869405831249f0cec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182970 Malicious code in itale-dci-fngduyge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49ae4ee65de2da1a72f4a9ecae4393c1589abc667c295e355c67940d3242da6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-noy-gtopo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2de0d6bf76286659f9c195be013b374834e4d9aee3ba39394c5ae74258d61493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-jos-afafiofa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35195bf589359995435b89f1b92b5008dd9b9ba7f1b8cb6153c27771960bfb8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-uibg-abufavigaaute (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da3310245e6cca2c71dcc87b5a8dd2f841748ec97c9e04d235723afb1696d5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-favr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af7858c82682c285822b8bd8fea2bc14400481b3d649ff1853cbc2ed6d31befe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kg-tifffaav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebce8ae7bf78b1c8351dda692279a6da7b6f9b751889430dab8cf158b97cacc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uinaga-ugu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b60fd7ef19b7ad19a499b6f31e5c6d303e8a579274c473324ef7d3ac0ba8d28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-danoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1fef1fd504755cc54dd947e0e692c717fcf43158cf3a9d18b2f34ea49d784c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodioj-agafajafiba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eeebb16745842fe5955a8d22693b0ef8b3e7a6abd86a7c441dc1553f652c554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutag-obolavuhduli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f0a7feacc2c64123d2c5f520183283b5fcb5cce09ec002b5b3f28ed27060c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofeaki-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e2da9544152e67fa5293f5b604ac324733fcd1efe4972e9854f64c727db9eac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodio-agaji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95b45ef014c387fa642cc4dfa60208860b2b767feae6fd25afd2b81af0d5dada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kiunu-bivocab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee06181df864699147a3b917d15c5807aba3b29f5cc24bf1cbdffcf20aff1af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...