MAL-2025-183615 Malicious code in lomi-ifush-ugofali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86f75292acb1ae7bce1b1b28fba0c948939517429e265c70af58e19f15b47b96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182108 Malicious code in gocay-uga-agidugafyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d08be756b02812b42cfdd9386c03bac3f560429e76d4cda27e3a534c57be24eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184468 Malicious code in mok-luni-huojakiavggijim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 384afb114281f046c8f7b4bed3dc6d2a8d00fd0c213249c9c4f9f6edaf4c2704 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-olia-itaniabu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90cf6242aa9188c361d39bd7a11c9e8069c652de8bc25e3c6244f867263e4915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-afibaihid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c376ce4d076a4c49d12561ce876b95900a936671712237ffe87723ff4d2c2aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutag-zilsdgauma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce0ba83693d3ec71bba08e009ea9ac9a391713f15cdbffeb2db1236a39ffc598 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-jos-afisigaffafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa4901ada9ac753cc8a7f7e3f914e73886d77f8f4a7800e27eddcbe91fface31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilisiamo-civufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7b101c3d14bfc442595534c8d7c30fde3deb9c449d0a6ab664ca6110635d274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-ni-hujikakum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 674161ff094bcfd0ad7a1f0d4f0659f574217ac7242bb1b16d96647954f26c55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kag-tgvcb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b26d97015ba048546be0e9b34c8fd7d24f5fcf73c6c269ad507f13d5b52f638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dabami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b21d66b7a3ed83dca521ee51ff2a7d60645117f816a7ca68736549df822f9f93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitouko-on-lakoikaunoak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 868ed780f7f895ae3b03c7cd7aaf9727f38d604a8879b0ee83c807fca9c3b9c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mok-luni-huojakiavggjim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 508b238775ba6c12a9726d4ff0c6c22b0e6556bd6ab46b40b8d34598da0a95ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uga-agidugafiufyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e70ae7e9704c1ef9a6c6993d3bc20d84aa799b2e22107e6742c36cbddb8a4784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-don-olima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 708a63c861a787d1042d07a67757ebfa46d68560817d607524a68e6c05163ee4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knilu-bofavaunuffkain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd30d19b387df2d08e1e5dec12adb40628c31ddedb399e1a53b19123debea6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-fusiaadog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e2784c2073485ae2b5cd89d5d067d23f8d93fdb0fb44818f97b557ba7cde626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-agg-iguqakuuidb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57192c2c8c762f413afc436b09c629ecd9e878d8dcf01e8d256263fb4929e1f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-obios-bidabiala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d1cac3aeb7d648494fce274e8503e33bf4ceb79b43c590d53594dc08f4ea30c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggryuyegfjbsgbatebu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dd17812860bbc2601b8603ea4afdea4ec4646901b999ddb1fd21958929ed17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...