MAL-2025-182210 Malicious code in gociy-ng-ug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 165689cb74204c6663655d5ae00be9b69c0ce16176f2a16985478d40f13d7a05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182793 Malicious code in itale-adci-akni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06a8816ad3d6edf9cb5f17f7b3cab8bb6b2d1996cf47781348ec255eecaf0631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183219 Malicious code in kisut-difg-dig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ba6ee5ee484d0105d26a2b4071e96eb8bd7b6833b77b8b0b0c5a30c7f695e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184482 Malicious code in moki-luni-huojakiavim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c48a58771c310669340161df13627c55ce367ceac5c917e8155406c9251abdd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuidcng (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 490d567b7336db015e52efca7cc070afcfa5c9c464ed428bced9de666e4884e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182060 Malicious code in flights-tuig-alakanjiw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea7b2adbcc7346bb432a536f02ca7adb71a620b60a4a5874d8b0aa445ea61990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183339 Malicious code in libc-ug-atag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e45fe92289839e2b295d452a65ae4208dd084b33743c0b7ef06b4b8b9c087240 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182975 Malicious code in itale-dci-fwe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0927784b04550f7b46d557e1801dedb4768e9daf49d4070550dbb4d966511b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flight-iltag-ziluma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39bbf21c51ac117463ffa0a4359224ea9875f0b0aa09badf2a853e95dfcebbee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-faverufadaix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a96438850ff7a901b95f23b7203910c5ec8e43f7ca18f2d9fa93e96ea2c75be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-afibanaivuvaaihid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83a0ad08f3460cef612c7463e267ede3fc39fb052f5223a405ec440493617d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lfki-ahbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25c28df431879e015135f166dfc4ccd74f285225ddba18ea1ba9aea05ebec3f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loibac-ubg-tuagiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86dda0d463972891d31ed77b216843f35b4cf9e11c48e2193db9461c05c50925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodija-gifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c953286fcd70a0756dea610a4c9bca92968c65f876272a2d7f937761f4c5e6b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-ugoyughafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63f16edb1ea27d2f287ebe1691102dc17aa2fa3234d87e6b2beec63402dadbc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oihg-moveda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775f95f498a5c29888ec3ae0a93073a516c1768a321edb60aa8a306ff9aa9772 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodioj-agafafba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cad6b6b03cc1db491de8401bb5b3deda8ca22cea9c319a9c4f4186da86f2c2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oib-givakisasusois (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a749fbf8c02dc6f424975a784903fc857faae424d1c49e2ebcbd8583dc184328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dikouhgoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84bd10dc966774ba0ec879a2d5d71d8eaebeccd4ae5586c0950bb9f9fdb3b395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnuygugjkolujlnri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c218d0d32f1c4cbe5080382a40361ea2dc08e5ecd6f7e34f1c47e40c2b43a060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...