MAL-2025-183696 Malicious code in manu-oi-gsisi01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 790c2b8980087d8dee43a2e8b4c1a27bcad5c1def1f372e0e58ffc02e999b80f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183416 Malicious code in lobac-ubb-avigfagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b7b65ab3af393482d0ecd44e8e5717f9e3d04b767e905c72ddb5346ff44291 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185002 Malicious code in sonic-kig-tnadeaxwqcav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0faef3b152e4bb6e15502fa2da4c8c0368ef90810aa355abfb1c5b5d8260098f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutag-obolau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c6b6a4356a19ce2da7cf7030d9d57f07e1c319711f10616ea43165bdc99e6a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuwabimagavl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37b45108e145129d33563ad44863c587fc555ae3698a2b3ac29f77df4ab219f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cef408d2e90f68bbeac7d3aa26be4c7cda8dd1f14c5045711d147046f245fe87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodioj-agafba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ce66689fc6613776d0a7f0fadf7d384969759679217eda930b7fb1e7d45adf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutug-ad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a716c1553b431fe3772e86a4d298ad92d90eda17a01335e4bfbfd348e8ec12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggpantekkkktololgujrhygjhbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d671879bea205aa9ae7c65652bae4683e1017574997426b98a0b286ffc4b6bd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifus-ugofaliuafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e49351929bc0abd492df0ebdb9ee16dde5d3b752f4db0c65a89a129612179055 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mugiy-ajoig-daicutafaajjk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18c1668121259a5f25ad1dbb456f0786033c8ccfb93c316b4e53f2dd7b1ba629 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvog-daicutamaak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87fa1bb5458070d0fdf7a50a050abc09a0161bf32412cb7e2eaab9e69a542fb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaz-alai-yulabaivuku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1f5a742ccc98a25f09da015a518151cf6cf0b56427ca06497714b8ab4c0b49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuauscdoigbl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f796004f195ebe7a60bd25b5e2c76fa8f0ecc9bd7b118a6e81f72af258559a92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ubg-atafuifcafaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29fa8a0c6c7b2a84132d5ea3eda7a7c8f31f424d7e49340a50b21a558871ab79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggmatondanggangtengdyddru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf5332b66da81222ce1c524edc5c9e642b817adc55808d07d3d45f9dd51b54ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kujaahubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 859ff1575e61ebc9d0c804f5f0f6f2955f31fb1592852f59ff3c4b96c4cea79b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-noy-gtoapo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de8e1847af90fad9f762b3ae8ec975496893f3a612ced7a1ec98d7faa75e48d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-diguafuvaoatav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa45b7d73d3c551bdcf55d053c6b768bbe5afe7b6429c79985ffea31ab632ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-danuoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b968cc51684e6a2c8ba7de377b11252dcc7a8290d7f0ababa3286c0bd4d0651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...