MAL-2025-183888 Malicious code in masv-ilmo-civufavba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1fa0bbcb9afd47b6e56d904fa52072283023b80b90ad4153d168a4e0af8cac5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183327 Malicious code in libc-ug-agufagidug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a0d25f8f7fc5c10bb5d41dc1b31884b0c19280d889eda98640d35b3e712a771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181957 Malicious code in flights-inlutag-idosao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc89f15eb16eb7ea8dbaf4833eebd01ecd4b783a51996369fe679ee201573a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184233 Malicious code in modasv-kuu-boaffu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d44fd225befcecf77ee5eb23c755ed87646391fbb6f07ba795b440ad2c5e450 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184529 Malicious code in mokok-lukai-haj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f5555c00a805ac591545ac8ff8e184d987f5e9aa40a08d0a852f92f25b5eb30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182548 Malicious code in imuay-agig-iyucauaugafg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec5110549c90735003ccf89029f171fe9c000e134c5167da507d77e55aa285b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggryuyegfjbsgbajtrefbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2394e7faf400ee3b8f270cc9ec7d59e442bd656620ba9bd76a98aedb3eb68de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggmatnru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc6cb57392d13aa1cdfc67f6d98c513b4375374585250f59fe30ba46240444e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-nilant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09dc282a0b549b15da08c7ab72ba2ea98a4614737250f0a67a122266363b4acf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitaukailok-don-olikoaisima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dba13c6a066c5e958594e2b947d0c474e3db37c7f3981a75b4b6083e9fd1dea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-koig-tmoeroca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d264068b09c442c3da026dc8f62816adf39d765dde846103ec49b628679bef9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avg-ijimaumfaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da350e4cd00f9ae3e1a80560d5277ca32bbd2381c9654305f1708d4d92687c5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilo-cvaginanavcuovhu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b6bf98234a510609d4842689c608b6d543b86189eac3a22cb717f9d16784f72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tifuacav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52561131aa6cc60a8b7bf9326544b119ffe36b9a59a961582d6ff5d32c3e7069 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-jygwuyrfwuyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21cfc02afe4c0dc735d52e23c82cfc4c875b9cb7ea0ae4599fc76febd9a9f7be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kulig-tgacoav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbdbc45584e7ea9f4ad817d8a84485291791cf61318a8da323dd938a94199fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-dfg-difzcfccb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84c8b50de7c333472ecac1c7b2acf53098cc8011c10b4fdeb83d62abdfaf6bb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-alaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3027ac5998a588da559c0fc7afef70136851acdbe198ab7346b730e4f58ae7fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-foi-gisagablan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e66ae694d97daf0aab6db334ce10ce6ff06b63466f9575e1ffe73a7fa0d6603 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fangususo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e31a175b574e8000dc9bca36af5f1d341471c36fbb59547b2aa52b75de10beb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...