MAL-2025-183825 Malicious code in masolv-avo-cobsabbasvov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d250e6a2c902746638fabe91d06251ffb91f0a1ee175f4833b2e54a4c7a84387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bonijavuficuadcfvaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e95f787eb41af8583d91004bac9d809547aae1e5324844156f6944484e88ecce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-omfi-cafacevavisvoetfama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16d80504cd7c12db964c7beaed8f8d2de8b24848911e52222d07c7fc21474533 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183733 Malicious code in manu-oy-gioafissioasloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9188ac92a663cff3c98b059afd975da1fe2419e2516bf131d65e04c2c39b3e72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184892 Malicious code in sonic-jos-afa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dd190dcab38d1a22034ad628fd2f5873360f5f7d68f8693ad9f156eb357e2cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181974 Malicious code in flights-lutag-obolavuli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e079b68dc56bdfa9ffd15cbe992e95dd06d20797534d15bc0cadc39c10045f9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuig-alakanjiw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea7b2adbcc7346bb432a536f02ca7adb71a620b60a4a5874d8b0aa445ea61990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiko-avuku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec1307a7d3963578d8a1168c6c07013c2ee6f6ee8787db247efaf521f5dce9eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutg-oidmo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a1671745c2079ec4163497048c79d60e5ee9d5b1b569ffddc39ca2602d7a49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-digoki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbbd76e1570a2318c9d790fb164705193a0ccee0bb9a7957c668907d024981c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 010d052d1f964d1b945de8e4ee57352789d706cacda8215ec1c27430060a0c17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oig-tmoeraca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fb0c640b68635d034b2bd45da2d88827305dbed7319bcd38e2c76058bdcb8d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gssi01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f477bf5e6d149d056250e8264e6570620018317a74d457acea12aec94224e921 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-agig-ig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2414cfc0a5ffece70bfd298c98c0d9e8bada7ac516f7219204cb4d78e732b018 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvog-dnieamfnugpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3637c4e46d4c374c0cc7aecc344a8bb57e219a8b36741dd8cac2d9a8251d629c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irher-aeswadwadafeafaadde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c33564b20c41957dc79bb28be9cc65aaaa30657f9a65815fd425c9944f7e3d9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rryusyfsufytftt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9abdca089e375df5b932abdbff741da21b183e365c98f33dbce04dfd0f1794e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-digafvoatav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b4f1b12442b3309fbae061589ad8f8e2ddce4b972ecd74f0bf6c82eb44aba4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labieagyeoka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b86124a8d348a345cdc37b4cb3d8d3eea532116e20025a55657903c92154fef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-fngduyge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49ae4ee65de2da1a72f4a9ecae4393c1589abc667c295e355c67940d3242da6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...