MAL-2025-183532 Malicious code in lomi-fis-fakiugabas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d8ced8477ad96bccf986313bc37c6914b558d9c6b9adaef7bacb48942e2f16b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-faver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 252809d8699985524d5e11b5158af9ae32d914f0ede5d69842a67e828a354f85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-foi-gisagabgilan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 324ced8bfdb8396e8bc348b008023d6b353150954538870823614ce715b1022a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-inlutag-idosa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bcadc78bc14254dbd719e8325c15697c0c420fff875055d7bca01dbb869d608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loibac-ubg-tuagaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 670d14b2f4ef3bfbef032fd90ad00a1c5299a6c299f06ed05b4978bec32014b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baa5f02ad1e2b71a6d5f1839c4bbcd63ecef37b51fa3d0a4e1426575acb9d760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-on-lakoikauoak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ce3b1043814718b6b2283d845cb16185c26f41c5c9781283f44f2641dc2437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84822e962ef693c1564066dab1c0453eeecd071c49e6d8475fd8c05e3599371d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuiga-alukmaibivza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f99c35033e1f4cb93aa88ec8e17c4beeff485e0dd2074f7616f1c8bdf100e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-afibanid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3860a54bc24374ccbf227817309bfd7daa00c6af7658f1efb6fbfaf992661bd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnuygujkjri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 900b724c772f18813d66a98df15491b29e7e31e2fb7f4f32f3f2427d0a8feaef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnuygurygjbkomtollujlnrti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7351f26975a5eea940be1584ec5bca09f79bd72b7af21a8aeaa834e05858c553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-ni-hujikum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02c0617744d1aaf6ae6edcfef40b9e48191f5a9f736e46b41d8fb6a8b4b73b4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olimos-nolinu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9a6422b662a8de02cbfbadbb280b43ce57908dcec2d561b1ac30e03050b31d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-nou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9073f7af806d515175efdaff87dbdb96f98a181a0cc0692d1d19850c46999366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183345 Malicious code in liobc-ug-afayafuycig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b0a6acdacd00e92ac314d37f5f4767ad48afbc0d5b961565bdb68c7cf4c5ae2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-difg-diguafuavaota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e621cc5518806235fe87c084e6d740b36a8f6e71c6543c3bc535afec0adeb157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kulvu-baiucaufafuav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd19e7e8d11de16c5d578537927ed1288e60b3d6a5478f9f10487b0909a9d719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kidt-avog-uvuffacfeaaiafv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 910a9d65355299748bc78ac9ff8962eaac96ad217854d75758b256962d443480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kit-bogavoaawfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 529316016365cce39020d0962a12d41ee3036405a1a7b330d6fb70132026fe1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...