MAL-2025-184762 Malicious code in one-kiat-ibudarda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8065db43a1366dbdacd6cc550f22109860a6cd1d24c8114c50b0981117066d13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183978 Malicious code in mitok-don-olialobsna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fd0662c7ba7a81e8fa16d3395b5a70d5a708fa22f8bce40eb6ba5ae95858677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182129 Malicious code in gociay-uga-agidug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cc6248bacdfabdf7e86d071d14d36e901583ffabf723e76a952d9859eab376f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182164 Malicious code in gociay-ung-fugiufugaicagiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25700500945f75c86f967efaf490b68c741527bad83d4bf6b120aa5921e5e365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181917 Malicious code in avarage-olios-noilagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c375a46eb64142c279dd5ca7322503cba47d0a9ba479c9222ea5cb5f465d1132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182088 Malicious code in gocay-guga-vigugdivai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2696d5deb232bc776a48e12d708a2f6a079b6cee58ada50ab4c6463612a0faf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-ugaoyugixchafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8f515cb40ff2e7b535458286a08e7fc2f4ae1e4fe1ebfd95956597524768562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-jaab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dacad449794653a0b5a1fa80aea72047b558cceb5e827894de17bf5ef0bda21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-kvu-ibuagoufab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d47c4d9d1d2f1814ab1fc3f90019c56fe847d211999753d15ab840831e78b6f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiudt-acavog-agicua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfb86906698f88edae9818c3ccae4c0df7a5f82c7cafef6d7e097e7425c5ae78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-oliutka-taba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5914699eeaeebe8aa196c1e3ea3330b560669100eb5e2bb8a19a11410a6e2a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kaos-fgahigyafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2549378d5629d502bfa27a7fa175e71b6565c54e5cebb8dcbbaa22705ac89378 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubg-ae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 136df813ac48ab38d81ccd969955c7078762d3c9857fc4a8c91e7256c7f16408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-kvu-ibuagoufavauydauacab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a36c8c171a9c82155d81f432783f0b9f60e07fa49cb9e2d6cba3175da0df782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggryuyegfjbsbebu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b428980f3c5bd931b3cd9f2de67d90340428999408512b3dfdf0c7d543f1909e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uinga-uugucfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c9bef97a49c5762fdaaa911484abdc87dcc1b440273a56ca8bb7bbef95122d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ub-badadiudcafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffc67a72f80fa7df1dea458617b4390b04c2672ddad96b537a5e90e2d9cf2050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liobc-ug-agfiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 136dc1037e6abc5bd7b64aff99438dadfcb54e25bceb2bb1e1e7de94254a9727 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-zpjozakuika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a01e48f83d0237621895ffc23789a4c79e696832f7b557e4b5ce0aae5f40559 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avo-cbv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddb20b60fb713ee3115c1d309201c1ce1fffc3e617cd4769533dcc8afd24f33c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...