MAL-2025-182380 Malicious code in imodiov-kufi-cocakmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57038eb96fb5a78c6c5d9e7a282072fc49b1e501b11176e136646f90f5e498c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182436 Malicious code in imodiov-kufni-acumnacffgteafsgredcadfacvfeh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccbb286f0f170561c3d03fe41454b785b2eb9c4958470336eabd268c66694b6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184746 Malicious code in one-kat-iba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42b5eac24d2aee8b44265d09f9d7f11f8f1805b163da90783cc65d2d54e1891c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181708 Malicious code in astam-ifut-dakakioba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b2fa74240561838df82a6ea8908387ccf4aa83a85480cecd98db06d2c60182 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dn-olikiamua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74161678933400873cabfb478b98d6fd2afd0729d7f6a5ad0e6911ecb9cb6efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kt-gabf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ac5d3c56cfe862daa57ad24284b0d5390b34915dcb7b97bad1bea73095dbb3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksdfo-alfdaasgsdion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b30ebd578af6298d1dfbecfbb0fe2b1f73c2b987e2ad2e40c637abc8a1164446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifus-ugaifoalfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7744ca8fd8ba1e2436b2f6d78d8193977c246188b11409d5777fe13dfb8a6e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-koifi-cug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fbfad4fe7e9f9f7610e4d23f4f154a69cfeda95b86110858167de9d640fa3e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2eaf0f6609ed560bf6c40450fec79a7e8018c6d52adb13d21677daf91e5063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fangusso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be9f1b0decf0e0585e7f8202142dd2c3c68d4a36dc5a82e1ca49ae92b7c6d8c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-fudvitifagagafyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 299c954248d7971fbf8754c5d8bbbe93ae332b2219a39b0ac6bec04e0d74fb00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-yg-uhitaggadatusafadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f32e86f997fa8810cfddb0a642c421dec94fe2ba3d97e6b36c662d553eee7df2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baa5f02ad1e2b71a6d5f1839c4bbcd63ecef37b51fa3d0a4e1426575acb9d760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutg-iduhiasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7afbc1a7fcb5549aaaaf3a8f5c09011ce153a234a17d786a83e1cca414d798d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-avcafivaivuaviagfavacd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 978fea87ffffc06e6efe49ea3991eadfb48d55acaf6acde70cb16167c2084f14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuiga-aluza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da1bc894fd97c7894bfee2486dfc1e153c2529167bbd5ce72aec0c816fec7f82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-fudvitiyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad0d46468538bae9c6ccc9c5a958356cc45d70a332b2f69570174380941e1a76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitouko-ontcami-lamokinia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ed1c8927e31ef3150a43cb5994dccf8112b823ce9b5506f532a13f206d394e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-avcafid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41d2d3a6cdeea32e6d4256a7949b4bdab40e21e1310302812ee2624d03f85e98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...