MAL-2025-182761 Malicious code in indea-fodij-agf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b713b8f6c88108851df24e0df47a5a45111fb284b38741007fb3eece796f9c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182300 Malicious code in imodiov-kfi-cuauscdoigbl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f796004f195ebe7a60bd25b5e2c76fa8f0ecc9bd7b118a6e81f72af258559a92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181843 Malicious code in avangs-olios-nolibaayi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c963d99fce93732384a1c562ad4e6ecfe6b3b891234b3d510acdd8d42131609f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilo-civasavuinaum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48cd3a284fc9af45b52359d4a199709b8ed90713987a0338cf89336bbbd530bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kt-gahuvfadufafadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da57976355a45b7c3e3d81f52626f15dc06c3b89be5f226adbefce786c3a1210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-jaufajab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2e915719a8df4400def253efcfc08f058bfd1ac9093b10cf7f589e389001068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imailok-ofe-lanauia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2ba9bfc2c91e12cdf590e85762a5fe4d5bab924e752fad5516c902354b4f854 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kiunu-bivoyiacab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50bf6009bb8ccf72fff489979fed345708f03c7ab466ecbc228f2910558698ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goiy-ng-gufaguagufaufafci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32a9ededadb62c14a79d88cbce10b434792c1cf044edc5e9e5951b23162c211d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mok-luni-huojakgjim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3be1bdf278d9382d9ed241172d5ea39a673afa073200d84f2ba69d35a9fff957 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufavcseqinsdxaoycuruban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b05e8e6de9f9f146b9aa93408a90a1c8d44e748d7b82561d911d75fd99c71589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olobc-uyg-ugiafaidabaiuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 838b6d0db12800e01fa627ecab46df65ba0a8bb87014a3a89e9d74e9f053f17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olims-nolisfasghdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d74b8cb6c2b8b495768b47df5b789a591e633d060538585cde342e9d11befb53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-luni-huojaim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9824316a7d15211102f6327d6474e93f93860067ba369de72ec3dc1c8e9d08f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-boniv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cc2e6537efcb372df433c82b15487e0f848ba008378fdf03383a21fd0af32bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olioms-nolisfsdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a756e6f297bc8738ecc787a94b85658e732550d12d1bcd2b9ceff95ab95dd52b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dinuhkosuhgoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4681022783bc3962752a4e089b2c879e733b1977a0e1bbc083ee49de35e8768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oib-gis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ddc6c65dee1b85a3729add344226cb2ddad682833ec29d7b4c092844ef57bde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kaos-fgahgfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2655f7ee67cc735b4e907ddf0c103746c219f5cc83449838e38f1de79ad6bf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasv-kuu-bobu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90de9e4271a612024ee2a1ebbc0d1f02489ddc0e1be137212238d9a2f405c12f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...