MAL-2025-183228 Malicious code in kisut-difg-diguuota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c372d417f73ef5a6d31e503317e96cb7fbe3e7b11d0c69b52ea4bded4d2bb20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobic-gob-gvatgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8722396b473bc58ca0cc25b0a608aa6dddebbff192a0b0abe14d2a400fc02c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-ace (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22c986c5f7e997bf7caff2065640b185c6896b3525b5afc63f2022ddd32aa7ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksd-al (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b473c8f7e3fac0d1b25e8f4d0266d6e738f50386e5b95f0277f79847ad2067e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gsisoai01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd6b2994b036b00f72eb437007a35ff38fec0e673fc5e120f22084eadeade3af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-jos-afigafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40e42b3f408a4059927972a6ccbdb450ea41f696340759b2c8601b0d83466560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-avg-daijuj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06d6cc67335e15d7b4460c1bfe24eb103fea29e8bcaba7e3563d417d2cc1f0bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-klvu-ibaibavafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16c218ef66d2a9307c4a12f69ff74432e69cc2f9a27e6249a0be7e944001218b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kin-afbaufcaduc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df13d2e7a158ab173f2f9e7025ac07dc1074386e8cda94a003fe3e72b0688f86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-klvu-babv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfbb1923f0ed588e229f486a648a8471adf42aa461132fefbd438f3c18cdd880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lki-hajbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac7bb38d3c1f8e1527800137dbb2e390ca9fa7823a212f3911554d2f12279f06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-don-olikiakma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d14d186393c02c2979ed95c01ce753557e0d3902d5d37e46ff928a5e246a712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-ung-fugugaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a62af0a0d9b9deb810f92241d4d15da59bd0897a5a512f27808b789cf9f88b2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacffgteafsg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69015a0ca9241149bf52fb5a9442c1b3cc39973205c4359c0e86eb07f5f0ced9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-uga-viguvuiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce3b7be3e3de6e17c48a9f4dd7b3c302d4f6c55a5f46f39fc5ee0c60605ae70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182250 Malicious code in hitale-irhar-aaedde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4953703c6102ff493b3aea0c1e569395ded7238ffa6e424cc48d415d83e0b900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182158 Malicious code in gociay-uinga-uufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51882ebf4c438c396f69721f4a514c4e07dd9b7cb0e9de4ffa5fb42209169a43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182733 Malicious code in inda-foi-gisagan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6585bfcfd782529ce29e23ab33fd1976808031f2b1245463c95e3f032f29b45f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183153 Malicious code in item-atim-kuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3010ae6fa5ae0e9b92c452f4db374e18b87543516641377fc8adf8029ae3d3b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184579 Malicious code in odasv-kinu-bobacuoain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 571849d358e169f60c5745f4694daf6f53b59d6da6841dca5e14fa2743a8f2e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...