MAL-2025-182974 Malicious code in itale-dci-fsf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae498453cf0156dfff54a5f8e6dcb971c1d7e80cd1da6b4673a8550f4b7fbea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182899 Malicious code in itale-adci-gnuygurygjbkomtollujlnrti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7351f26975a5eea940be1584ec5bca09f79bd72b7af21a8aeaa834e05858c553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183562 Malicious code in lomi-fuis-fangusuiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e410b3470f44d7bbb1add945a9e8fa06785b42e6f7cc8342cd8238306821e257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181869 Malicious code in avangs-olium-noabu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a489fc8dc6d5c9ccff8a09a36c16e7d3f38767f85dd7072816b9a2b8dfe622c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-on-lakoikauoak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ce3b1043814718b6b2283d845cb16185c26f41c5c9781283f44f2641dc2437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kit-bogavoaawfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 529316016365cce39020d0962a12d41ee3036405a1a7b330d6fb70132026fe1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodio-ago (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 023c6224346fadf88269213bc36d3cbf7542eeeee6690cc66c6a69e6f2233e3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutag-obolavui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cc080d5e03d7dcb3fc63d724583c1fe339734b4aa3bc0c8053f20d9f673ecd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuiga-alukmaibivza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f99c35033e1f4cb93aa88ec8e17c4beeff485e0dd2074f7616f1c8bdf100e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tgacedcuadojxaepav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd3358820ec3b3085fa6d69fc9cd4d9126928fa27413b50b0553abe06e8283b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnuygujkjri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 900b724c772f18813d66a98df15491b29e7e31e2fb7f4f32f3f2427d0a8feaef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubg-abe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08418f53fe276a66cf5e9969053f85c533fb8370433749ab18c8c21bcbc1f734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodji-gigafoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6645cdecccb31a7de09a5f318ed73d3482150c9cbe8ae2dc4c0ff26350074343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olimos-nolinu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9a6422b662a8de02cbfbadbb280b43ce57908dcec2d561b1ac30e03050b31d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-ni-hujikum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02c0617744d1aaf6ae6edcfef40b9e48191f5a9f736e46b41d8fb6a8b4b73b4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuwabimal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1e33c0c9e7e7b530d5c04ce3c629bd7a349cb4c161d5763b05653e8991e390 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kulvu-baiucaufafuav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd19e7e8d11de16c5d578537927ed1288e60b3d6a5478f9f10487b0909a9d719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baa5f02ad1e2b71a6d5f1839c4bbcd63ecef37b51fa3d0a4e1426575acb9d760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kidt-avog-uvuffacfeaaiafv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 910a9d65355299748bc78ac9ff8962eaac96ad217854d75758b256962d443480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofki-afuhinagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22bcb01acadb22cc6d8fef913bd990eac5686342ce151cc7d09ef6f14114a59f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...