MAL-2025-181795 Malicious code in avangs-oli-abari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 037049c2ac2727b3d7bc15177943b04c3a7278dd489c45a544e76ec6c0c0fc8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182360 Malicious code in imodiov-koifi-cuidcavug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b84e1200e5c8288d9facd47ad7232015421d3fa7a60ff7ad226df5a344e2d30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185234 Malicious code in soniec-kat-favr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af7858c82682c285822b8bd8fea2bc14400481b3d649ff1853cbc2ed6d31befe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181924 Malicious code in flight-iltag-zilauma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b656d74e1d3869227cd57afd89e2feb5e5721280b2e652b6e816b915b6b0d682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184758 Malicious code in one-kat-idav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a646024d841c9ae435d0f3a04dc72292006f5590e1875ddbbdc80142ffa849bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182066 Malicious code in flights-tuig-alumabivza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd60aeada8172497162c6544e3c08ade6793c861593eb5b619d250c865bc201c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182645 Malicious code in imugiay-avg-ddafgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d0178294d148922a29cd2d674a90023b67d1bdf7a7ab53f62ad56105bbc3476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183687 Malicious code in manu-oi-gisio1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 135c5cc13110f149097b0cc72ec43e9b1cf4eccd76d9c0f02750b77a1c5b5ac1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185242 Malicious code in soniec-kat-icfafud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92919d5e1929192664be55c601ab141a80a687840ca4a64f07fdba7d26325496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183777 Malicious code in manu-oyib-gisoki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d4c3e7d3ac62eeb6ab3f1a5e5bb661ec39a6b7454209dd1bb7b386668eb510b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183684 Malicious code in manu-oi-gisiasyvaugo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08d44573571405d7d56e34bc037eefca95ea244a75a8f1b4e934ee611279747f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kugfi-comoldeai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8cc33150348946fe80a3bc68efc5b3651c9f1da4d029129d6e5de15a018b6d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181673 Malicious code in astam-ift-digoksnla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef33f4923305e51353cbb7aad946aebd36af6eb3fa9bd2a2a3e4fef383e5aa58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b93459be333114b10914381543e8339fef21f93982504492e991af410209b4f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d2629b933c76aef884e1a71e636e6e7e7a2037a0f8683cafaba6a987583b8bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guntur6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8b6c63eaabafd4d1696e5b9f6cf2523596548a56fbf46d0561730ebf6017cb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece4cfb5b7f019f9ff65727dfe20df929ae4ec04fb8703a1c9c26decd143a579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 072fd922e4d4dd49f3d66f95ae3c726918d2c4060dfed6195861579ef715a4eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181371 Malicious code in baso16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25a98b331fae4d2e348ab92de32fb35eed20cb8c2b19a9367e68c4e92f1fbcf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181326 Malicious code in @akunsansan0/pucuk12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b214b0cc1b7c6e26dd715953103a2c0c0bbe764a343f4e86757ea2b04b8bd77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...