MAL-2025-183879 Malicious code in masv-ilmo-civasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fe5fadc2eeea482ab68b89e556d556391d531c6dea1cda4eb93f1c0c2fb9c8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185282 Malicious code in tunis-kjt-gabisayyngf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40446f1b372e49077050690b73c28f90dadd74f86facffdc1efd9361d2fdea04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184498 Malicious code in moki-ni-hujim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3b38f07a2652ba1298e329787585d3217a49b90f60b4c0930d1e60cfbc1c8bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185039 Malicious code in sonic-kos-fusiafog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efc5260812eb13ff8ea62e327e3b7b45217c3f9b1c6646edd9a3cc0eb869a3a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181848 Malicious code in avangs-olios-nolyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffabe88ea853e27dd95137e27b673a8b05c774186e95205381c63621621c65a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182033 Malicious code in flights-lutuig-alakanjinmah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08af4da5e9dec678dd718d76fab4f4996cc4ad8d3bff81de13653133930cce75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183660 Malicious code in mahnu-oy-gisostsio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 245800ff90c2f22b0478cdd48b2c7e0899423a67d912520bddc6ada569a23113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-difg-diguota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b31be14540474bfc673070ae1657d30b80558ca27f03c5dfcaf6790b2a6df4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihon-afbaufcaducxags (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8c716ad011646d708f6b91fcf355f892e7a3cb7b63dc0c7dfff006ad663de11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacfgteagefac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487ce730e83660af79d2a7e0d28f22fa1ccf0dcdc7fef64a2142a5c74b6b52c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oib-gisog1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8999cf7eabe5dda7aa92f310d164d6426a5cebc4808611d3b443c9b8cde62587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atm-kujai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce9ffed68154fa2ace43f7873b374f9aff0f6768b054f4c99882722f6896d9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kaos-fagiufgafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f700dd8afe8ac7eb70a6e257dea8a865e8e96c4a1899a07b7c462ffd339fdeb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unise-kit-bogratipda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 085113e42ba5c1bcd91d3894899524800b5fd412929a0239c3585cf516390129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mokok-luknai-haj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb53e7aa4e67baa920fed5ab6ec631d924f3f47fa929bacfe630dece7c036891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atm-kujolioaknoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b44b2303aa44caedc3c259a2c5770f72e6bdc634a2fd66982b1091474d72e665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilisiamo-civufagvuafana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 978f14e85f75ebb82ed73b6484c851fe62831b49014d200e9bed8925a321c78e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-foji-giaiuasfia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64ea6a2ede519f82e9b0471ca2e2711db9b4285b58f40864fd2d4d8eec77c413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnyagibhygyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 777aa9ea6419ebe9c15f84081eca764d6bebab54e4b3339761462d208535b8f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-uhiafadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ac2bbb8746636446b10e7a2c01ac67a3076946a5c53cc75bf9c45a8dab537f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...