MAL-2025-183688 Malicious code in manu-oi-gisisgo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 935558bf7fcba45b5e0f1ebfd079722900bc309adbc5580ac6495bf463d3991c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-ihicfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f155a3c2095610a8562dc020447c066a3d3a32af1b780dc53d9473ce1ad815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-unga-fuggiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d73cfbc8bb6b0a7c1919b3b2e361a00948abf68b5aa0160caf8786dbbe42b13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-uibg-abuagte (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 700b608f90a70a6754efc47a30e5b1e6d283af420f38d1c84324385a61c568cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-dfg-diwfzcfeccb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8591e6538e21825b6299cbcca735980a75bb363395a51984ebb3ad7e82196dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-daoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78ec04a5e8aab74924a0441266637ca9e5b807675437eba4d3e1ae74cbb93ba8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olims-noliadnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6718a014bdb775def5df0ca8c6356efcf77e25a377aa1ba130df6baca728245d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-fyesf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c11038079d21763a6699bf7d374123ba64e2d8e1735ede609f3312f34c323ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-ujb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e2e06bb85bd07fbb6845796e243586e907762d428952ee4bca8e9cf8a838c4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-ali-avanuku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90dfe94e6fb80b17413cee1e1877b79e62220e9a55228cd56b5957c8c62f7c22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubg-abufavaute (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 551c9111516b8c7e362f36e4065c8e00809f68b8612fd9ee8e7ffad840a2d2d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodio-agaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1052e06ad14b7abdd636a08d12c6cfbac5dbdae70b15f8244362e72a6fa1eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oc-gua-vsjfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c8dc7b6633a1c34fcc3cdd0dc777af65caabb3193645db070f9efc96620628c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksgsdfo-ahksgasifsdusdn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421810c901015ebdea82d10b419581d6f67d4035c978b82b42d12285b7f5081b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kjt-gabis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60c6cb75357bef04a2c7734f8921808f0694146cf9095186962d6566e5228b1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-yafyudbruwegfheryg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1edc9add754e668a9a3ab62d140b1f2eb02913899c453edeb895d70264b02b1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182051 Malicious code in flights-tuig-al (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f76b981c695adc1f311ed1f4cd49d8e3945b39cd7d712fcf4f41cb923d6d35e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184233 Malicious code in modasv-kuu-boaffu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d44fd225befcecf77ee5eb23c755ed87646391fbb6f07ba795b440ad2c5e450 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183380 Malicious code in lobac-ub-jafgbf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbb7989cada614be82f6fa1fb4b9e9a6ed5292183d3e61107b51503a1737907e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182222 Malicious code in gociy-ung-ugafugaafug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c7a03490e840a049cb483b899e7715e50a836e66b0fb638215486da287ad5f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...