MAL-2025-183842 Malicious code in masolv-ilo-cvaihu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f48df2be2770abc2c0d65f2b250ca333e81da77b4016490ef8b1f84047acb1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184131 Malicious code in mlokok-lofeki-akiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beec1e2cabd735ac524a717139bd2699a090ebea49b13f00397149cb53b814ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183260 Malicious code in kisut-diufg-difav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80c999b9aed165b620acb2879d34b94b34bcbc80f2a42125b86acb3272a64769 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-yafig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d62f2398b0e91d39071d20a1700542e17681b655a78ec4ffb8e77b249f6ea93b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184592 Malicious code in odasv-kiuu-bio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7f352cbfa6b238479696887407ef04f03d8cc88f4e355c2b7b925d6e62626b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in one-kiat-ibudavrda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 754492b1e111d36a2e4e8437b6e7da80e0c598fee24dd8be639d8331f32e32ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiudt-acavog-fafiug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb4696066fb5855d6f6655e40f0709fb4c1c78987d1e577acd2701d7a3d8d0b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubib-gafiufuuffaub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af11e50ef4c532169e18aa09bf5c1d22ca5205d81b554bee90e304a27ec7b863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kidt-aog-uvuffacfeaaifaafiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eb37d1709808179e81f6b18333680b8928d89af94b7f68aa57df6691918e6a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ijos-afaih (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4667368c0cf25b9df376d02e7963b5c25c0af0d169a8346984ca6596d8e5ea60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodija-gifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c953286fcd70a0756dea610a4c9bca92968c65f876272a2d7f937761f4c5e6b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lki-hajubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b091b2e7991c66a8dfbf078cfc1d249758f9629fb2491ae2c4bfdacd1ac5b5e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-fusiaadog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e2784c2073485ae2b5cd89d5d067d23f8d93fdb0fb44818f97b557ba7cde626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mok-lukni-huj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a45d12ca8a33650ebe28437b557af6c915a2715bab87ad0415a2712066d66ff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ots-uyaidoagib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e762cd9d8c7694d79e9970d1697694085059e2df3bb8b57c31be5949b37ca5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lki-hakumjisubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 068cdd836a22c851756f619127451b359df8687d83422a3a0d09abaa12362e24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifush-ugofalif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da2ce94dbd3750bef2e20d54e2000f522c2a1646f7d26202e6348a5d1a17f7f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-fyejsgf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c15ef8cc539febbd30809941e33f5bb18147f450bd2ae5405aa359eacdedcfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacfgteagefac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487ce730e83660af79d2a7e0d28f22fa1ccf0dcdc7fef64a2142a5c74b6b52c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-kubsduzika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ce82c6209624ac9df5b8ccffffeb330aab8e186666c0b7ec7bbd32bbd33d7b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...