MAL-2025-182110 Malicious code in gocay-uga-agiduyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d236a74d4d3a305ce137ce1faa77798b104e1835dd65b61bedbf7278a42b2e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184271 Malicious code in modiov-khan-avcafivaivuvcd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc225dcb5c945b05ef94a2edbc308e01e7abd3d055df0fc78f94a6bc382cc3cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184767 Malicious code in poliaoz-ai-avuhusiaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f6455840f2464ef30d292a58254401350d08748a1bd05c8670ca3b70c9d4fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-akonolbki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d7988e331fdd5b2cbcb7a98aea66620b29098be20cd1e7d9ec5edddaa247ef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irhar-aaeasdeadeasdeadedf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4d15729b5e44715df37bd9d68987690a3e4c80b2a6698ef27ef580566e888bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-anaumni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1664ada783a01332f9e562ce3163ddde65b28f1c548684727249e2c7f3f0dbe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-don-olialobsina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ebd5d145b696dadf2cc3c8754e55d90edbefdc7a34c35514e4bc5c7978c960f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uinga-uugucfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c9bef97a49c5762fdaaa911484abdc87dcc1b440273a56ca8bb7bbef95122d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-doa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f126d6719843ce56bf6225716575b12c18f0a6beaae334ba94807c8e954d51a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuoig-timesexa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1defef4ff8e5a745d48d7ece087d36ad1f21dbe727e8b3dfc8b264c2af40e61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-daika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3a08457090344e07fbede7d87df122e366571025387f66c1e07173dd3b80d6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-zjzakuika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abcf309e4b52cb4ec9513ab77c6cdd449be30f5cb89337c53efa28605386c709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unise-kiat-boida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b370dc549125c54caf3cbd9321f796dc83c73433f78c8d8e6f57124f0c4a896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kubusisaka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70b8195ab43af99c61517c2ab74601569401b97e453ea557aec190f34a7729c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flight-iloamatnag-ziumaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2df12a789088bfd9e43e004f6bc9206cb3c5bf74205582fd4aa8e4d5fd3399e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-uga-viguvuiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce3b7be3e3de6e17c48a9f4dd7b3c302d4f6c55a5f46f39fc5ee0c60605ae70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ots-uyaidoagb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03cb405ceb939860e23ca0a4385fd8f9fa1d47f7da88595ec831f982b6ab20b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fis-fakiugaubas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 570e595b44a7d66efaef6900ed2e7dfe1fa0828a10e4828b46263f1b829277f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lfki-hakumajiabusubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31f47abcc6f00e53b313223a472f4fb39d3866430cdf6b025cb66a611384d605 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-avcafivaivuvagacd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a2e737956a0f9a0388212ff8c9f670f04e8b2a09a1707703919856f6d888e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...