MAL-2025-185282 Malicious code in tunis-kjt-gabisayyngf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40446f1b372e49077050690b73c28f90dadd74f86facffdc1efd9361d2fdea04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avlo-cobabsvov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 054d6849ef0d6973da1d7421700ce87d5d14ec6e9eb83c55a4efd9f472c0b701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-ilo-cvaginanavcuovhu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25197fda80a96f611dc968f98305b34ad3ff8e7ebef2a36da1f418fb6844f650 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-difvatav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 244d32d447bbd967a6895ed6044f0580769c2f95fa4d05cb2c6d5afd92f260d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1ef4df8c7a985e4775362f559e989f2b519d0e15ef117c35b6d6396a3d52d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183776 Malicious code in manu-oyib-gisoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5448eb67c5645daed2f5a2c6e989b0e0e589ffb5ab266125560e77419bd5175 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184237 Malicious code in modasv-kuu-boffu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0004da799b7a0238a911f9dc5f688e974fffc6b01f9ba7764f34b00c3c10df0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184481 Malicious code in moki-luni-huojakiam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcc505d227e9b915ca7170d7ac834751bb017500b5f4269856f5e69d074be9b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182691 Malicious code in inda-fodja-gifaisuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65ac7a1feba28c271283f34ee10efa6776e165be93d28c628921608125922b74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitokoik-oni-oldis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3938b2f5e157a209e749ffff3023a3ed5c36cf832e206fdfd99c5fb955e1c7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-ogolia-inualubami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4e2e44e7f5cfbee56d522da08697fade27491250de94613f8f6bdc9625e4829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oifads-gssofait01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cb081fd0cc926b141dc5f70f49c79ed09886a019aacf2fd7d63268367167a1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irhar-aaeasdeadeasdeadeddaaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b58e72deb3f6d429a6be14ec8768b80f74939c3326ea5f894c573b9ebca06f16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-guga-visi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a1f20bd9cb0bc58e595f39c6399bedb6b92035d94ffa79e7a77d6889d61b1b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-fiugafav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f16ec554d587a5d1cd5dae8554c1cda2b5b4994cbe52341c9cbe53a09d4bb362 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dakaioba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45b5573713b25e7e3c4a743c81ef1024c0720a5612a8bf4cdac1b5e14ab8d857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-ontcami-lamoki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54d42fb90c7114d9cedcbda8b3ac2f5eaf8645678eebd14f45239c85889072d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irher-aeswasdweaddeassaeeaefeerafaadde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30ec44d5b7509fd9028afcdf764f319221982a14228af9826d22bd8c20f1506b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bobacuvolafin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d1d4768a3e0845bb0f0807740cdb6d4594db1befc93475749a64405cb1fe188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kujabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e1696f9dcf62aee1906bf130bd515c412c1e9d29fdaaf13a50baef998abb93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...