MAL-2025-183842 Malicious code in masolv-ilo-cvaihu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f48df2be2770abc2c0d65f2b250ca333e81da77b4016490ef8b1f84047acb1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182477 Malicious code in imodiov-kugfi-comai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac79508ca47a94d55c4cc7547eef66fb8725376a30a481ed213b470698e7db8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183623 Malicious code in mahnu-nofity-gamoani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8250f553de7799bda71ab5b2215d8bfa31b3c694227378db661724653bb65e33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181788 Malicious code in avangi-oliutka-tabar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ec69a80dfb84c03c5a4b2d9a9f81d697315a8ff78bf65062dec25b79bdca53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avlo-cvov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d41b3d5644fab1ba36b595de637b58d7f2682208565b51a106deb961937b46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaz-alai-yulbavuku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14b6cbe51e165e05248443dd811b1e6abede4597e8d8f377335754987c12df80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-avig-iyg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5c0d4f9694d7d6a19fa1bb1ec2f1ed97b2b73f3c6813e6a8ce6565440fa777d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kin-afbaufcdc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 761657e617e9706c970df5a5ec9e69a0eb56c083af3a7c6246fe0cf7e14524e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-fagufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c26c50384b65dd066fe150918ea95622b310dfe095a7d2beeeb21ed057aa5811 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-jaufjab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc52dc2a45ebda69a6f7888386fb9c80f7f44a8b20f4f50335ce735bc9e63d42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-ali-ava0nuu0ku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbba432e2d02bb240a2d15b9075a64b30dce2311d569dfec391070baa1715a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-ugyui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c186fcbd763d5b35cbe7eb5aaea4d4df7a4250c207ed4bfd1235e52b8a02faf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-ung-ug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb81e04a657f1fa8eb340576620eca1aaf37738aa8026e8a5cb9d59f0aff6e07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvog-dnieamfn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9d82878a3aba3f1d4b4cf044be0e0f1a0b3c695ff53ab34bf7306c950886d9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kiuu-bofan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13f712e56ebc6f5abd58b080808606b530c790dcce403d19b6b941e60744b09c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oib-givakisassuisois (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b6bd5bbde0113cf42fb9268e6ff879734ebc4e9da3b086a1e75f9bce486d9ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifulit-dakiula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58356fea0094a83f875e0d47d5052fe70db770b025f99862bf8168cff606ceae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilo-cvasm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0912c670f0d874651883742e3d4bddf7731e06dfbbc987e6275fcff763e940a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olioms-nolibamayi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac4a5e1cc8e53f27b4ee50de4c015afe45193fc5a85b89d56957b4b15eb81322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuaucdocavgigl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa6c1f258883815f6fd993d0b8e487424db23cef97128aa9bc89a8571007f85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...