MAL-2025-184083 Malicious code in mlokok-lfki-afhgbgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efb1a46200b336a772c7a7589454e20c421fc2b2dec880fbf1c082e07e5161aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182727 Malicious code in inda-foi-gisagaan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c539db5704ef8e7763693bacc0563aa4e62a9f9aa4680934af0133690980a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-jyhfyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02d93ebb2dd845f1db7f13af9cb43306e82e05c413f5ac65b9c226ea2c639c78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tgacedcuadojxaepav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd3358820ec3b3085fa6d69fc9cd4d9126928fa27413b50b0553abe06e8283b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kat-igh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7588c29a96a29012e5b08f9d2339a7078f56536c136f77f6fc29c859296ff4b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oc-gua-vsjfhi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5931ef239366ba8ed82f65bca55d2c82f3575c2b2121220ff92f1eed2bdf1177 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-agig-iyucauaugayafg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4af798a49acfbec711a8c251258a928efe8534b8bef6555cd8084b3b5d6920fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181739 Malicious code in avangi-ogoa-inlubami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a42e2cfcd8cfceab97c68f4709c74d3fcef24e4776b6a0c04beeec8afeaa0008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182281 Malicious code in hitale-irher-aeswasdweaddeassaeeaefeerdaafaadde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f23cac8d047f2bd536304e31ef43094d3e16a8f65ac8d616ab2bd51fad64235b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uga-agidugaifyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feb2344d8a0b6a0ed2196e8356ef576d4daf84c1c180d8190ff48bad216fabd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-avcafiagfavacd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53135e73c490059198854ae98d7a7a06dcd674aad1cf14c88f392ceb3729d2d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-ilo-cvaihu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f48df2be2770abc2c0d65f2b250ca333e81da77b4016490ef8b1f84047acb1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183318 Malicious code in libc-ubg-atag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5093adcd512b066dc9b1a6b6ff139c73eaee5a43aa7e6375b9f3e8e24b2d37d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifukilsit-daiusikiula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf28f2ee92a5cd7647e24857fc550c123aae16e26e93ece7c812e93109080e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uinga-ugugfgafucfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91856128b2a0f8a82ae49024a895475cd0ca49437e2036a06cb54a9366f548d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuig-alumabiza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb5dc7072783301417022129a030e14ed1bc9940b43ff35c110aace712dcc986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184548 Malicious code in mugiy-ajoig-daiajk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a26cb06add0f09e8cb8198d029d2c5768028fdd2b6f15541451e87d87afe3bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-daba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e1802b587573b6f642253a25cc6d9fd55d00c4e10503f8f218ae6710a17dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olims-noliu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c3df62744d845f27f36c1f2021566483b119f0a95cffc5673b84f7387e01e96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dinhkouhgoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc84f060042a8fdfff4667dda8269d1c310df0a7c209f8b20d5a641cddea17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...