MAL-2025-183630 Malicious code in mahnu-nofy-gaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba413077f43483904ce6705b3135d97caa8e59df8893abc12afbcf6a99484018 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184718 Malicious code in oloc-uyg-uhai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5bcb456768dbb8142c30a0597bc579807b2894fa19af4ad5e14d725a0033a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185290 Malicious code in tunis-kjt-garuavimas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74ef3fd8ce8d63f5990091884ddcc3df4139927ba855d1a5839080ff82770d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182405 Malicious code in imodiov-kufni-acseqaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f3b99d0469be20c6bdc720009eb1f6e3af13a0940e7a11b3c6aaadc06b61371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182645 Malicious code in imugiay-avg-ddafgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d0178294d148922a29cd2d674a90023b67d1bdf7a7ab53f62ad56105bbc3476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183551 Malicious code in lomi-fuis-fangiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d378327361be19f66459d3b835e3754921c128e643a95ac70522383204ad593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183274 Malicious code in kisut-diug-danamifoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bb20452999aa36e5ef281feaab238e85e6deeb888fc707fa8047ecaadf8711a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183883 Malicious code in masv-ilmo-civasavum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d68cc82bd2170b58906eb8b70da08859c9faf3b990e04cfd3c07d1f256e0e91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-niluvabint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e2ff2577f2cd4454280ea94f0d896788f9d1bebbbd0e7d8dfae3d922e18391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-luni-huojakiavuggijim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0ef52a2e8bdc19d7fd9d3719345dc9d94d1d8714fdfa9a5ee060396fb2db189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kat-iaagh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d2ce76b37088f656e5141328d7c42473d26816333a9c6f0f136282fc0b5a4f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufbaceuiacfovadfjox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 694c27d1c363deb19c34fa78c7d9eff989c3d9fde6b55001aa02cd1b693486d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uinga-ugugfgaucfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b16a48397ba402b51d239b43c9b80e4515e06b4e05c39e2da2672e02d31e02d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kit-gahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a84de994ae4925e86eee873c3e8b523aae9ac07745ccb7ca2ee9b2f086cd403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-koifi-cuidg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddc47eccd57d192a5ab4901ea86a8de5b8f42f9f44d3142464c9bd189ace6a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-favefix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6765ce51b839f6ccbadf83426629081f21869aa35fa11fe83300e8d72324bf30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvog-dacutamaak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5771c90e2bf9e50a02a341f29528a89643f48383cdf213ab1618b82cb235f2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-fusiafadog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1893f30419643f2ab41912fec6eb48e901a31af973b28a4c0f06b26d542cb8ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-avg-dagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f5740f7ee304d05f3c7ae55bb0318034fde2a9447ec74bd3b4939d5cd5e4c66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-dfg-difzcfcb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27325955e81bcd2b59d9ecc4ddde91ccdae86dc306eb25fe5c0e9e2015cc6d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...