MAL-2025-182542 Malicious code in imuay-agig-iguqakuraduaidb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8fb69023a616a322df089364d56ff4484b961fbf68298da3e1a71ab468eb9c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182388 Malicious code in imodiov-kufi-comoldei (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 163fa660fb2e0034ee629860ec0789e4330bf16e6c41ad0b67a05e84beb8e04d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183529 Malicious code in loibac-ubg-tuagauaigga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b5b811f532af5551f80924202cc7559f95729e82e86a55694fcb70cc10fec96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-ugyui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c186fcbd763d5b35cbe7eb5aaea4d4df7a4250c207ed4bfd1235e52b8a02faf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kidt-aog-ufav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bb28371e59295a4812b9935160f3512a46af4d6a7fded2b098996bcb6539874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184713 Malicious code in oloc-uyg-ugoyughafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63f16edb1ea27d2f287ebe1691102dc17aa2fa3234d87e6b2beec63402dadbc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183656 Malicious code in mahnu-oy-giossisi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8da78aea58ec22d8ef0e2a79c63c6b333f98c79c5588c3d378f8ea4dcaaa0a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvoig-daicutafamajjauak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b451c9bcb882a8c28ec71f025d34b74704bcfba38e511771c4cae0f0cb735841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-on-lakoikauoak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ce3b1043814718b6b2283d845cb16185c26f41c5c9781283f44f2641dc2437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyib-gisnuosgif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf81aab2ff720e42a7d19b08e08a67933cc9801d782d116b07c2fc9cd2f71e8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in one-kat-ibufadaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9712d7d51ace948ada3d80f10205b20611022512eb8e2ebcddad0cf7b5b26a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiudt-acog-efbag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8818ac6cadaf0d9b232c80556e871e535cfaf65cd344e0c270771205583ddde8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-ani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 543ffac541187b4195636a6dccfb0b7d0925f3d1b8f6e2e44bcc51043373a31c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kaos-fagfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d96e7e46cf201f2af3ad308147dcc651e487f073b98e130848317e0732d395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilo-cvasm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0912c670f0d874651883742e3d4bddf7731e06dfbbc987e6275fcff763e940a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dabualikabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 515ca68d459ef3332387bdf95d25826d11caad6d4359cd253e259bf599a17a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-ni-hujikum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02c0617744d1aaf6ae6edcfef40b9e48191f5a9f736e46b41d8fb6a8b4b73b4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dabtauzabidami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff1faa7eae8a80f53e67224f65aa28387fc2befa0526bc732713153f6794c6b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kian-avumangafiab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 820e49af10325072d27ef4985a09bf49c60596e83eb0b9861192c0ecc6735ce9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oig-tmoeraca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fb0c640b68635d034b2bd45da2d88827305dbed7319bcd38e2c76058bdcb8d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...