MAL-2025-183305 Malicious code in kiudt-acvog-uu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1009aaac588a708677af48ab3c6533a3db218f7271aeda455f768e367d866cd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacffgtea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9023978dde1a4cd111cb9747beeccef1da4c46a6a2c7c1144e49d1de55c2b21a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rfrt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8081936317aabb1d804cb6fa6935078fc970eaf224cd64c6896c3563bf751fba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksdfo-alfdaasdsdgsdion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ce6752072103ca1c77b5c3b0c4bffa46802c2c90910eca2fc2c742f228e58ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofki-afungi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ccadac53b0e4e833d35a8623c6d619cf0a052047e246cda9faa527f3b61af1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-afibanaiavihid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6958dff562b82fc17a1ea8937511a77d1d150654dd15b151bf04e2a75ff5227e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-guga-visii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fd58c74294120aeb25f0be98c8812dbbc4175806a5da42a3f09760353550641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kian-avumangaffgaiab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55eabf97fdd3aac34f4386a4aa6fab4454e8f2c305a9be82c3a3702e5a464936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gisgo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd66b31dd3f733afb9fb5868c5c66742f25f0d98a885538e9d8c6dce7498b322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggmatondngnru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dca4e7fbbf6185840977142b8fd561afcb824661e9061b942c3e58dbcb2e2dc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dikouhgoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84bd10dc966774ba0ec879a2d5d71d8eaebeccd4ae5586c0950bb9f9fdb3b395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kjt-gabisyf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 260d3b55346989877333b27161b6ce5b5035535ed9613c28895ae3ac37bf4b3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-uibg-uha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2029ae0d40a4aef830e2ae70332d848284bc8850f514f36dc8f7ab6243198c59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-nik-hifdagujbagaifah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb462c66586c367e7fe5639a99621f4a69a8df103a5401bc440e572579a809d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loibac-ubg-tuagaufaigga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c863ce7b678821eb450df113b3463eaa6e673ccbfe48f1428fb033c1afa528 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-gioaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 949587c67dfc2b2a4fdc2a365d309303d6c82829ffb19f93bec6d29be2712ef8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182010 Malicious code in flights-lutug-oiad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fbb6f95792bc674d1c22a91d6c6457b0287e5d78b6988facfcd98a64c00ea36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183536 Malicious code in lomi-fis-fakugb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0620f04e87ad1df634f77641bb527f6e6e2002e99dbdac7976c4a56af56a3135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183979 Malicious code in mitok-don-olila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ada56ddd17ee180057940187ed6c716e7754ab7100f4893a658803556b1f1c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182079 Malicious code in gocay-gua-visagigojfahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 082c48a92d97c7e0b955dce7297fb2a4a7a633d356f892edd79e22600c057e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...