MAL-2025-183871 Malicious code in masv-ilmo-cba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 559b0a68f2d567bbceaf75523b800f531d0554cda1c14d3947a701aad8706f05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-notar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68306d645661f39fa3b3e4062f33dc46b56d3c9216b59f155231498665cf3731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181916 Malicious code in avarage-olios-noilagagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 226390fb6c592430fcc361047431a5cd0ec4fedd17f4c02a690d89315dd79723 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184139 Malicious code in mlokok-lofki-afhugi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942adc79dc004d70587d33929b22c58cde880f20df88deda2c1753b1f2887fbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-guga-viguagudivai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fb16d534f4d6dbc3349acb06fa3234b6a1ba4f434390a50e0e3c32319977c82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufbaceuiacfoafjox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 282922efcedc55e3c78f3d4d0394c2e2b6e129a5963e491024b884652b58d0f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodji-gigaiuasgafofia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a36f3fd648020569300f83eea011de524721b352402d7f207998db60ccc9d3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183141 Malicious code in item-atim-kubuskuaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b422a40e06f0b263bcc4348df3c6a6ed30ec3d8331a38ce649a52ae134755b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tgacedcuadav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5ff20a5fb24f88e41415224033cb0aee6107054aa35b94e9c9fe191df5fefe2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-nilvabint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a777447ea4c624ae27c07c1444ae2b0712ce90b04271a5ec7ee747c2119619 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182234 Malicious code in goiy-ng- (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a289049f72316df99cf0f72b6e1c93653cae13b750758873e84ce83f6020182 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irher-aeswadadeafaadde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bea19afb2beaf894579b2bc0e2328eaf24c0780c5a1774463f1df91e1f6222b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuausigbl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a996aa5ebe42ca81447c1dfdecc3ae7451769e788172d87440c5c4273e310b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kugfi-comoldeai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8cc33150348946fe80a3bc68efc5b3651c9f1da4d029129d6e5de15a018b6d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-uga-viguvfugudivai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7971b3e149a13b1b8a2add0cfb73afccc42e45718eef695f5e209d55f57bbd0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33bb10c043d993c1e246bda50b99cb06e07584d8b4bb77802db2fd07d966555c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-doni-olil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d0b4f855fbba4f261c85b4ff635a5da868c83bd5e692f6bc8c87c26304188d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-akontolbapakmuulltrjyfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b21d0975bc22c8c0a850c59d4e27ab16b4946f97a9d8ecf7855418bfeb8197 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mugiy-ajoig-daitajk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a952cf9282e23a08ba9ff19ec953ca1b27cfe4abbaca938ea1ae685dc09f47cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mugiy-ajvoig-daicutafamajjauak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3090795eb14acdc5480c56f1795a1eba2632f750ccd7e5fd4aa8d131b624a71f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...