MAL-2025-183090 Malicious code in item-at-oka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12ca49ccfef66e849e8e8b80b9658b092468a630b9bb4fae0c1650e25c769b5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183611 Malicious code in lomi-ifush-ugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62da30de824582a340ff03d0932ebdb8c75a4bb5000a385129da6f57a2f42cfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183951 Malicious code in mitalik-don-olikaisima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fffb32881e3931e30af06b89e51baf70cfcfaea935f228f8a235f888c2cf4405 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuiga-alukmaibivza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f99c35033e1f4cb93aa88ec8e17c4beeff485e0dd2074f7616f1c8bdf100e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiko-akuvnaun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b3978a6b69e73a67d7fedbc2a99607a86ef35611f23e527d7bfff549a09b94f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-yrtdtr4q (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7c9832b633818e2f6ca57884a0f85dcf9a2f547bf5ff81d5b991dfe0fe1eadc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olobc-uyg-ugiafaidabiuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9a61d1808bad4fb04d61e9b70fedff6a0ad419a66c8cdfd994d31603d309a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-yg-uhiti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fba57695a8984988b05025ed9c96c29fda56cdb3a6716022dcc388528a917eb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-guga-visagoihi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0047ebad62628afc662020c2244ad4bf5b402a62000defcebc9ee0f2aab59a71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-favefix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6765ce51b839f6ccbadf83426629081f21869aa35fa11fe83300e8d72324bf30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-avcafigaacd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cefbd04cf9baa6d5a0bea10a1411d75709510a3b683f6d9945249e86a7a8ad1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-akontolbaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b502a9ec2740236113b098311ae0346165adbc001949d1c6eeb667623bcfa91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-yafyudbruwegheryg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f208b8edd6329ac422182e812e945bfcf6dbd287a1a04cf56c09f12f7d8c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ijos-afafiofiahah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 923e8584a2cc29cd5bd381130b002a80151be95eb5901297da20acf91f66f974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dinuhsuouhgoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58603f6c06e8d789ddcecf1a711f1a3cdaa2d73721ef7182d116657b229bb776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutag-obolavui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cc080d5e03d7dcb3fc63d724583c1fe339734b4aa3bc0c8053f20d9f673ecd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84822e962ef693c1564066dab1c0453eeecd071c49e6d8475fd8c05e3599371d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubg-abe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08418f53fe276a66cf5e9969053f85c533fb8370433749ab18c8c21bcbc1f734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutg-oidai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b12f85ea45d0393cf9424ab2d9e9e9c75d9fcb204edbb3288da3917f1671cf0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mokok-lukani-huj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c03705a9767ffb984bb7a42a54a4a5af854f2b70e6638b380490080af290c324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...