MAL-2025-183873 Malicious code in masv-ilmo-ciaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecab233a9c866d7a138312e36bd54cdeed67333efe80eadeb697dc50e0b47caf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182917 Malicious code in itale-adci-gnyagibyyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5925692d367cf6cfa1660475d49d658aa1b8339afde13f7592242da6dfa61e28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183458 Malicious code in lobac-ubb-jga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96aa4ed28a3086fdd1ed7bba3731d110c6da7e2c98a028e42935bbbebb8f2c08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-uhifadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f52874187a3034112c917bd32bbc6e6cb0abb23ff50b1b3e9ae88066220b3d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kiunu-bivob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1630dd4503bd45c8b3b826db1ec4e25f92cfe8d0cb4f502c085636432fe2baf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-ugohfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64de33983032eb16a22d7de2fc80304fc170257f69790fddc9931df520657e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kiuu-bo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 626d6c799b88a39dc2cfc6f7325d30ca0d57f839c3b05089e65e273e01a2116e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-omfi-cafegada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cef4ccfe7c8c1850969e088006319b2c3a1d4135b5ba007a7d4e3728dadd474c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181903 Malicious code in avarag-obis-bidabla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63893b5c2dc03b3b9cca4ad46bbaf7b0b797fb878b8cff9509029f9f050e2d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183844 Malicious code in masolv-ilo-cvu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e85ed465c209fa476f5abc20247074bfd8d2293719aa659ce09358eb3c661af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185131 Malicious code in sonic-kulig-tgacedcuadopav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dcde3f50a15add27a8e2cede88742122bc6e6201c6542abbefc8f1830b5f59b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-fudvitifagfyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c434037e1504e747120a01614ecdfb71c8387f3b519122eadfdb4076701c44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ifut-duoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9eb033eee83203f5bac153347a544e260241493a8e2ed19ce21329be73c5d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184256 Malicious code in modiov-khan-avcad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4229de7d68e3dc97d2d2aab209f9007bb74c67be9f837a14e7899fb875ea6a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183163 Malicious code in item-atm-kujolinoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33cbe604ba43caac2e5da0dcb19f172982139e92122065996f9ea58d15c392a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183772 Malicious code in manu-oyib-gisnuosgif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf81aab2ff720e42a7d19b08e08a67933cc9801d782d116b07c2fc9cd2f71e8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182230 Malicious code in gociy-ung-ugf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1f7669b1c80b52101cc2ce59d5e9d6e7dda9bde619e2530bbabad3af9280072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kinu-bivoycaguab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75096712af21cf752b3bb449e809114725f30884728e3731b17a5da25401f16b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tnadeaxwqcav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0faef3b152e4bb6e15502fa2da4c8c0368ef90810aa355abfb1c5b5d8260098f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bobacuofin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24398232ecb091000083827f94ebc2792bc2f9808fb9fdf8927fdc342d10c18e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...