MAL-2025-181921 Malicious code in flight-iloamtag-ziumaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3d70c7aaf36a15d61b8257f885d28f4c69113fd67fe51d487b5291d4227ffe6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183577 Malicious code in lomi-fus-uga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f461f247f76b7a3ddfa88fd0899201795776834054eaa8aae013f6ae95c911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185017 Malicious code in sonic-koig-tmoerocneaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91cfafcbed9f2bc25156cfcede740dd6b5b88901607a534d1cbd40115b2c8d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182485 Malicious code in imodiov-ofi-cafacevavisvmolcabyca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43bd9bc2b371d7b3fdaba182ad358cea839ca954328c64f4ce65d4afa20b5041 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dn-olikiakibamua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c499d88ecb544b41b65c0ed54429aab2973286d612bf3b2bdf6c12f6f6bb12da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-obios-bimaaogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fa859dba0320e214b64becb496c2d76474138c84ea0c45735c72f5765159418 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-ali-avanuku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90dfe94e6fb80b17413cee1e1877b79e62220e9a55228cd56b5957c8c62f7c22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutag-zilsdsdfsgauma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee722dd2c06d347a898820ddf689bc23d19751e208ebd9c6e5f8422242ccc9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-gua-visgojfahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d492603c4c3c9ded6c5ede7fdb31e617b772433e8f1713acc474c254d7badb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-gioafisoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e948acc55ead6175abd00658e2d85ccc65c79f1940193cbcb0069b08771f731e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyib-gisnuosgisof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c1edd572d0e1275fcd9b7108e6ba700d8e19ad10631faf5997fd721c8cc2e5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oihg-mopigafaifc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f3f6c31e6aaa7dee2cb8b5f48a26e9e6ce7e5a1151a0e6e6be8b3e3c167736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fgfao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23f975b27efc7d6f1959d48dae7b878c892e05ddcf8730d116c5b62b3a18821b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubg-abufave (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b3905c573cd9c9f806ca24c3adc22af0b0500934b32ec101cf678ab7fefbe64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oy-giosoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed7855dd702bdec2e4e6ae5894411aa79c1a842fd4a44ac44b8161942cfa4dd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlook-ofe-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f9b5a7dfff6237a039094d2e2adf4b39a2bc4a3c6455d6e0c36b361b6b24230 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-avg-dnieamnfaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd02585ab2ac04f26a3e0830c20082d2b5363dd59aaef4cdfcf3cbca19426d31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilmo-civasavunaum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78208cd9e77f7371557a2f095c2c9b1c6124d9d6bdbf4057edee0a14ce051ecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-aknkonyunaymhentgdti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fceb9adc0ae446889fcaeccdefa3fd2a02a982245908f0419710bd481f4dfa30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kjt-gms (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab4a4a8619bd93532a655cf219fc92472a8040b0527247cfd7623ebd21fa4020 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...