MAL-2025-182942 Malicious code in itale-adci-yai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddb3b8c291161263f4079646b3115a762b136ca71cf2b6c619b3efb2504cc29d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183310 Malicious code in libc-ubg-atafuaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e967360dffb3d396e8744a57e2e1324abc4413fc45e699d0ec457f5b6bf6cc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183306 Malicious code in ksut-ag-ibifua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 823ea1e9feb668703992b1c2ee01f932304e3fcbd5d7e95a2091c88c58e2e049 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-fudvitifyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 811eb04f5c296af8d0775c0287aa1c35e7a9ac2bc0940df219cd502dfa0aefbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-fnghdfueyrfge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 354f605b63f6aee8cfd5957b06fd277f770a892b98ace86ff93e63a98ebf509d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-foi-gisagaan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c539db5704ef8e7763693bacc0563aa4e62a9f9aa4680934af0133690980a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiudt-acavog-aguu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41ce988e48253a65832cbcdf1594a2ce955762360650c140012b953141dfa102 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-cocakm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 136f2f349c6e998a3bc5248038384d138ba5a11999bc95c2876c969c864bfac4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irher-aeswasdweaddeassaedeaefedeadedefredafafaadde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60204f96f22f6598891bdd615d6d258a4d6e6e06b1e11b4ddea55d6e7add369a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bonijavfvf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 655a8986cf16e65f120c120f04e7dea3eb2b6787035b561919e84b48687ec6bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oib-givakisassuisois (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b6bd5bbde0113cf42fb9268e6ff879734ebc4e9da3b086a1e75f9bce486d9ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuis-kjt-garfuafaakvdyfimas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a83cb3bf727dd1ae8b0957f44ec4a7ab301f32aedfbfe78c927872ea47f9ff8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutug-oiad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fbb6f95792bc674d1c22a91d6c6457b0287e5d78b6988facfcd98a64c00ea36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-aig-iyucauaugayafg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 114defa79e721d32576f9ee3696faa4bacf72a6496996f133179099cdb874eb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-klvu-ba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 711c5409f46760d3c2026d30bbbf30abdacc801223524e5565cab20263fb6258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oig-mopigafc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e2b1c040ebb9a953443d98531a63825e597bb324cedfed6b5b7b9e6d6d8d9e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tnadeaxwqcav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0faef3b152e4bb6e15502fa2da4c8c0368ef90810aa355abfb1c5b5d8260098f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-digafvoatav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b4f1b12442b3309fbae061589ad8f8e2ddce4b972ecd74f0bf6c82eb44aba4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggnru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09e3d1e42a8eb4465ea10961d1ed932987bed81cebbc6e13a1d3d18fe3952651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kidt-avog-uvufacav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eda547aeaff92ac189120aafe7673f4697af5e8917e9e742b85d5c7b0c08b824 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...