MAL-2025-181752 Malicious code in avangi-ogolia-iualimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88692e171857339dc93c86bd79216800d890c399560256a46c148e55ea8b89d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182925 Malicious code in itale-adci-hykaulaygg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8ce7a4a863926396a7fc78a11d5d4ef2a15db676ba9429701d7b48a917ceb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184935 Malicious code in sonic-kas-ag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 496831f1173e1f891085affbaf362424dc416d7b9a02fd4544e117f722bcdeb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183045 Malicious code in itale-dci-sstrtf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52e9f3eee273f53d76ed1b73feef80d0e1dbfdcd31c6a3ae90c0e9629a614e2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182023 Malicious code in flights-lutuig-adisdfdglonolo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9411ff2084a5f0827e187044e29aba96973657d09b1a5b4ea71ceda21be6448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185189 Malicious code in sonic-oihg-mopifc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15aa163a62b502905eaca5f12c98831e7ac399b48292cdc9ae2f9fd500a3e1bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181788 Malicious code in avangi-oliutka-tabar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ec69a80dfb84c03c5a4b2d9a9f81d697315a8ff78bf65062dec25b79bdca53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182688 Malicious code in inda-fodja-gifaisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0e0cfc0dca069e5f9fbd107b818c4e0cbe7692084118ea0a5867570f92b18bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitouko-onti-laok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 247cea48c5c34e65d0686eeef89e735d703edc46dcb5c8a1bbea37beef497206 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-kvu-ibaibuacamuvaavua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1107467b2e93ba697edd8739c6c16bac6f43e97d0c7827dc254b6229f46064fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-yg-uhitaggfadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb5fa222716ce94fb2b90cff3ee7d4fe6aee31a173d7b569a7a3447c3f476fb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oig-moifc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3dac68759470f86cfd7e18db67655ee0c654417bebe0d05db753ca982fe67a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-jaufjab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc52dc2a45ebda69a6f7888386fb9c80f7f44a8b20f4f50335ce735bc9e63d42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kiuu-bofan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13f712e56ebc6f5abd58b080808606b530c790dcce403d19b6b941e60744b09c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-laoka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd630a3b4b04c9664488e5f8800f7a89f2435046e5f35f4c2200a858b6bc6283 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irher-aeswasdweaddeassaedaeaefedeadedefredasfgeaffaadde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be9e791a106d60102440cd74d645256df58aadad7c030a275d4d9b33d6e30729 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-ung-ug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb81e04a657f1fa8eb340576620eca1aaf37738aa8026e8a5cb9d59f0aff6e07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182506 Malicious code in imodiov-omfi-cafacevavisvoetfamola (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e842e6c7197064155ba4796581b7130e1c1e8ab7586b0f1ade39fdc9f2d7287d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184742 Malicious code in one-kat-fidulafav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8d7cbb0c415d1ff5ee480d2779b40fb3f9b2c6fca3a57dd0911c4f94da747bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184709 Malicious code in oloc-uyg-ugoofifi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5889bd28b256c558f4b9ff1280bc8e2f4f7c47329dd99765c31447422a74b151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...