MAL-2025-182376 Malicious code in imodiov-kufi-cmoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cdf9bba538d14aa966721dbb920ccb418f264306e58cff56c1b8cfd2587d00a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183413 Malicious code in lobac-ubb-anu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afff5282c4994862959982ed0c13bca1d23cf25d10d80927dd37f392e860c593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183549 Malicious code in lomi-fuis-faks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5e68bcc44723adb7e9098a53eed0317e6e6eed9dba9697e952fc1feb350f56e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182963 Malicious code in itale-dci-fehjidfy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b733068c576547fd4a33d708f3815d7ee718e319ad403d45a19de928c7a10ae1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185148 Malicious code in sonic-kuloig-tgviavu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84af51c39cf785f2b5cd232572b5093adf96ceef4c2f288c8c956e8be42e05f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-jfgauyuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f7182725aceee49ba715431e2f42e2b0799a77f94dc0969139765a8e240784f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuauscdocavgigbl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 042315a4244f7a5db6398a4cf15d01b19951c92e998c6395144e06dd189f255a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-klvu-ibaibavaafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efb4a4e6c6ac942931dcdee1e261df22b81cf12ad26ed6f600a686a55469c741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maslv-ilo-cvaginanavcuovhu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 656941ea059e1a32ea8b0a4298dd11fb63992a79bcb320facc3fcb2b6d39de74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gisigo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 096ae7b62a3151b4d96aebd464186069c4f959d3ee5eefd14f8bd1373f7a7982 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avg-daiugjdfij (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29713d3bd5a94940aa1e2aad74e3ebae48421b3cf5b929211db125d885402c56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-dfg-diwfzcfecdcb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c6bf951cd0f38cbfc386e36adc18750ce5a8655034cd54a99e0c2cd60fc01ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubg-abufavigaaute (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24a386cf2c42641c46d3a3e2184c3f6e631ebda5c00921aad9df19645942abdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mokok-lukani-huaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ad0df8a117f1ea97763f61f44e853d28e693d44119a674700b679e55b637b79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodio-agajona (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cda5fbe83d8e48f32f62c3b3de4cd4ba56134f6fd6c61a959c7343f3c33d7a34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacffgteaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 895ea27a642d99b7ed0b5dd4313ab9a0aba0566f25c945c5f8db8f776271591f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fus-uga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f461f247f76b7a3ddfa88fd0899201795776834054eaa8aae013f6ae95c911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-jos-afiafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93f72104ecc638c7860b19230e6cda4680c08394a78331dc68b53b6c8cb9077f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-oy-gisostsiogapo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7075f1b2f307be2b5cf8c31bbb407719d74ceb4b2789e975a00f062b1359c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olims-noliadsgnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbfd36ca0cd3863fdc8b3c7038a2a77efadcb54e23ef8a306d756e93629a362b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...