MAL-2025-187767 Malicious code in levels-event-bionics-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bdee777e410b3fc1869f19ba81326e968afb704dace7f49fb14bc7f0397e233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190389 Malicious code in xerxes-perseus-antd-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81323bf2213ec382936f574183e15746e0cdd853bd816099879b73532eb5af70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olimois-noliadsdsgsgnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3578c5502cc9ee86a8c80a193c5431afa859d94e45415156731ce21ea0be7590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kiunu-bivoyiacaguab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca7b20413a87c452d0840d5ef23d658aeeeaa17e4bbcf23effa58dc870572dce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuig-alum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39cb1b32aed10b136cbd4f3715c6d97f6a300983e3a22c3e1356a066cb475bd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avg-daiugjij (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da5c3cc014959b901783595f884d96e910548173231e8260ef585977d34aca89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kulvu-baiucaufaibfuav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10ab12fb8eff29e01419eac996d9d1cb13c9305c3d5b51a1adef004cda6cef97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-jaufajab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2e915719a8df4400def253efcfc08f058bfd1ac9093b10cf7f589e389001068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutag-zilsdsdfsgauma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee722dd2c06d347a898820ddf689bc23d19751e208ebd9c6e5f8422242ccc9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-noy-gisostsiogapo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84af238b31e9b6b75358c760d2e7dbf6d39f16d30c4b339342754d183861b77f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-olika-tabaluoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb11a284ef127ad5dbd28185d73302a4130ff4f19ff8e22a142107ee659e702e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-ogoia-inlubami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4af30e81fef5fd7965307224cc0e576096634eeb3046a09d4c16d42d4028a76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liobc-uyg-afayafuyacauicig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8569059c36ee09f7fe2c1db553a6353608579574a6faaad763e58064ca45ad0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kidt-avog-uvufacav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eda547aeaff92ac189120aafe7673f4697af5e8917e9e742b85d5c7b0c08b824 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kilan-avmnab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8ae2ecd4b47ec51e4cf4043eae78923b225e9d6e50dd76a6cb5c6d9ea33d3ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihon-afmaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f55b4f08abea5dc824ce3a2d0b4a6b38acc4df7826fec9aa7f79df54118bea8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociy-ung-ugaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31e17a49fca8b1ce91a70c4119424a95cd06f02085967d0f1a21a3c50100568e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-on-lakinuaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb08ce36e6290159fe8dbc300634fe139632ec7ecfc0ab362ee7f3d77dcb652 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bonijavufcacfvaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38462911c98244de5b8aec4ea37da83d9ed145aa3d26451682892ef74af34597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiudt-acog-faig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c37978d3b57b5848a81a90377f67e042f7e6926f937fa4973a5a36a8e65bf077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...