MAL-2025-189949 Malicious code in toml-protractor-spinner-inflation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81d222bb1a9411c20be96d3aed78769716a085e98dc4e62cd956f0cf3ce62615 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189112 Malicious code in redshift-build-geodynamo-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb6dba5456ba6db7b6f8b463cbe02f3929d795d4d1027a1cbc0a88a12d75528 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mugiy-ajoig-daicutafamajjak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1922d541e418cf9b2c2a2264a57a80de0c5bfea76f8c494f3f3eb2f8bc1250a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-adilo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44d21a343d17ecb73b8c135feedec85366f60e8a72f7f9c8772da8a012a25f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ub-afdmafdacau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e15a5fa9119530d5be87cd140649cfcced8e4d954232c2b9d362ea8b676ce025 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gisiaso1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96f8a9c63f2cb4e402a924766172f0ba5f3adcf2f6034c257680c99f1d981af2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobaic-gib-giga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 768445c5a75505d80e82f45ead562c007e3083a6e9c43e71df29fc1e0cc14cdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnuygurgjkollujlnrti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a08f6a18e817394f80cfbc9139ca2e128f2d76b50a2459765ae4e1c2b63fed50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ks-fudvitifaaafyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2821d99a6f4135602d19cb2240dd2779a6363d003730e788e1f04097d5dcf67f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-hykaulaygkusaytang (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74bbbe2a26043a49e6923ed5378dc6678ad5713aba3ad9a0d527e7198c3b9bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-ugoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c9723c2da97b6e73ed98c719d6aee10578864fcafd6f9fec820130b6623e0cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lfki-afuhiugababanagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93c628d76da304ebe30bb9dd8ec1d0b24c2b75ff70e2a158f7da868be2708105 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-avcafivuaviagfavacd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca88ec71734e21fbe6b0d07d2659f957dc9fc0051e34e87b70baeda7c4afdd93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-niluvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe5ef6bf42d4bb1ccf98ae0ccca0f13cead9d6d23b4a11a4c33f677e5b211480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ijos-afafiofihah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6d65e15a0869908e07e454b061705293a0b41eee75222b8b38bce13b245b8c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lfki-afuhiugabanagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60cef66856750ec799b15efe9605bd59bb496936e0984a596a5ae3e5308ef9a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasv-kuu-bavoisiyabu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d82d904f3e485fbf044db226f9b580d8005fa95f69ea6aea9d082b3106a00ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutg-idulabisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2562a4832701f72844948fd44e2d8d5479f11eee193da1b3f824315042d0372a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irher-aeswaeae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace35c5fd9115a193c8197955f96890ec18693de8637424ec920179381910198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lfki-afhgbgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efb1a46200b336a772c7a7589454e20c421fc2b2dec880fbf1c082e07e5161aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...