MAL-2025-181948 Malicious code in flights-ilutg-zilsdsdfsgauma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5158f138419d34d6150f130f4a49f191b5af0233e7a0270840f4fac3971c5931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183108 Malicious code in item-ati-labza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5452425ea102be4efd47b4be0d2401eaaf8594db68aefc325a94be41b3e7e65b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182702 Malicious code in inda-fodja-gu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9aaa1d1c244d977d1e3a8d77525477eaab96e46cf4c30d16c2a638dca4c7c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oids-gsisofai01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c47367793afca5cf0f9a35ca32583c6a4a0be053b983cdb0524d91eb0019a2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dn-olikiakiamua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8b9ce86e496144f25e4500060da74e11e52fb5139905fc87f615fc1b071c98d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labieagyeyaoka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5a6dc0688c2a87b3c4907725a351ae9e5ba699f677c375f0a9ad5616027ad77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-afisigaafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd5f828fb8cdb811ae8ed2b9e4dc1bf718b7b70d3bf5a29df399152c0f4b8db7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-unga-fug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18126ffc4821ecb116c0aa4cad953679d9bb49e7a39195d1590d8a1ddcd3568e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ots-uyaidoagiajb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcb16cb3c74f751bf99c6b6d2b78ebfaea9dd75247ef575ddd326142b5eb8309 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avg-daiugjdfij (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29713d3bd5a94940aa1e2aad74e3ebae48421b3cf5b929211db125d885402c56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avilo-civbusasofoiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47722648a83e49f015a0770ceb44ba1b519326584f4c85c1dad2edb8efde368b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-klvu-bav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e483f02a845895bf2e64288cdae1d14e339134d342840715765852437defe1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-afibahid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d37a79af175b71d69c39dff82186e17d56e0e2208e3b058b1f7216d56b52bf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-aig-iyucauyafg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bf9c67acbdb7f60f6fd018563278026afea4dcb24f7074082720a7f7f936152 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-unga-fugiufcgiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d623b8122fcd8f439c7ff440d4925865408fc94bb86bf0b21e364df9b2f83fd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avlo-civbsasoifaufoiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bb99634aa3d7b67f10f1c154282f2e218fe853444fdfe88d5ccee9cef86688b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-avg-dudigai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ae213d05bc7b2736a6dab621d9c6e41f68958d25eade3aaf816e4e259b76e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-on-lakiuaoabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bc48f54e9de84c3793cde78719f215992cce1d13fd768fd1bc567f2ac827a1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitouko-on-lakoikaunak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c537215b8016b9f9f50aee314c9f9a67eb000136b2785b42a94057c78d5170f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182086 Malicious code in gocay-guga-viguagudivai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fb16d534f4d6dbc3349acb06fa3234b6a1ba4f434390a50e0e3c32319977c82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...