MAL-2025-184869 Malicious code in sonec-kat-fgafav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9a4ee05dc5d114d2ef4f9829e52ae58eb62895672a6efe45c71653474629f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183502 Malicious code in lobac-uibg-ua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5d3ae9337759c760f11777b882be31dc452afe7b0839818ded57ee650abbc44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182305 Malicious code in imodiov-kfi-cuwabil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65be43a29ddead94cc9aa4e82950f1b14db3bb67d25156f1b26e63e25b0cc379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodji-gigaiaafofia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d58ed2e2dbe309639f2279f9658a147b49482bf0a7e4617a05cc75ba6721b7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-guga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52f3cfb3ea05c3c2bdfba514a76137476045ed9d63cb57dfedffffc9552bf4d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dabtauzdami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b8a1d4bb08bcde17956f6757df6d7b805c293982eb66f422ded652f71f9409 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-uhifadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f52874187a3034112c917bd32bbc6e6cb0abb23ff50b1b3e9ae88066220b3d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avig-iayafucaamrfuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 877d0aa0b72e505e5a09e65f4e13871389aa9a986da206ed56c2bc48f21bf61c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avlo-cobsabaasvov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 374301fe9eee0ac01cb13d2900a67ec66305db3eedebf7dc6b7d3940bb3d8d2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-ni-hujim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3b38f07a2652ba1298e329787585d3217a49b90f60b4c0930d1e60cfbc1c8bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de1ee7313cb244e1081a64f00431138214500030605a0f8e29f51abf40a0d867 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuiga-alumabivza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bd7c72418ef6a3fa5806c9c2b688ed017799ef8e3f6671cc8146b1e6a5e3964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-icfaff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bef05bff3e2e070d80c5dfe58e23e4307a18ea4d7bf22601ed8856507973b5dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobkaic-gib-giugavsaguga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3e3283bf6b5f3f20849a9d200ddbe0d9ddaa45651d094c30de2a68bd245ce8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-omfi-cafegadad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c38db537bdbb9ac692f0171eba73b63a2a9641bb316d1bbfc96ab3b1a0815758 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitouko-ontcami-lamok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51ccdf9bd8b4e23a2f4628cc4aba68d9f4d57574145d87c98c0dab1211063d04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-ontcami-lamokoina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 745f4f8e0841b9ece9530aca36763c3c2d14433705b2cfdfc02dffeaea0b8fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-afibanaivuvihid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d042ef08869bf0357da7e811da4259d6dfd98fd252cd4a4796b452de7a7d47a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liobc-ug-aag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8d1eff92455378f34d0e5e4541bc3992cba06772b6bcc31bf716ea2d60eea57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-dfg-difzcfeccb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 382bec0263840f93e0e354816c4d3795e61f6f6d122e5528fa4073b635876189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...