MAL-2025-181912 Malicious code in avarag-olubis-balmia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c2fc298e1bf78364a1ce5c0d483f6246e3b6eb2eea53694b8ba660ca498967 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184186 Malicious code in modaiv-kvu-ibuagoufaucab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d0d28bfbe91b7a88d650d9f1208b8d7e1956d98410f52c489d8e692ade55d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184074 Malicious code in mitouko-ontcami-lamokinbia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c2f0acd2323d9b27fff1f7f119bd63ba4a0cbb7c0352951240086e166e34cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182928 Malicious code in itale-adci-hykaulaygkyang (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 087b806d2234b7874d6ec9d8b0e19ac147445e4b285e06dd1b18afcbf7c74393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182078 Malicious code in goc-gua-vsojfahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9da3a5d4303008715d63404af0f8770a1cc4b5d5793724ded4b278bacfe7bde8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184588 Malicious code in odasv-kiunu-bivoycab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a061400c6479097e8768ce18447a2cb6188be5bfe8794aa7ac7d75b10a88ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183767 Malicious code in manu-oyib-gikois (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d643244aa1f83bc88622683650e580d74f894dc6615cf8fdabb5c803b3ffd678 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183138 Malicious code in item-atim-kubuskiuabika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5dbf06c3c308f9b1f58f5a8ac6d7f97e5692e3c3b93e0102340f957d801486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185041 Malicious code in sonic-kots-aufb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1977e69d97b88c5beb3f89fc181ce83abba5f00344ac4d2db755ccdfa049bb61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183147 Malicious code in item-atim-kujab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a69c9275bccf23da81d79e613d69d5b9e43f7879a5daf931c3a7fc79c61b1e24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avo-cbsav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab83d18269f22b80276b6429a52bfab661d216993dbc971eec6c0f01796d8d37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilisiamo-civufaagvuafana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cc8beb0ae9bfe7787f4ec95e42ad8d20f6ec36453bb8dc0c01eab1e3df34dfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-luni-hujaim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e90e62a88969c75706ca194eea3c109a9eff185860348724c02902c74909e7e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kubuskui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4d6c142d9dd3ce4e89f65dfabe18d3cf27b0da85a0b35d23c7278ad0da4e4ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olioms-nolisfasghdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b28a2f27add803d710b030611b1e4b08f5430c3a52839891532a9b83f8909f84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacffgte (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6670a599e5ff92fb43bcf2f509b7b6e011ef95e81997e27249d507dfc6c4a05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181778 Malicious code in avangi-olika-tbao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa49ea64e1752e8e6d86a9c83a0d68a8e6317c4634ade546acbc3d7b30f7334a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182058 Malicious code in flights-tuig-alakanjintew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54bb185fa62f1253e7b43aa8ef6971d875b07b59e32c2f176c8c4142beeaa8ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1ceb1dc5c496f9ae53d179c45647d6e99ebf5d062e4180a3c320300983cf571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92d4d667f6264be4da7008d4131b21566c3dd4b6281e21b0c05f6522eeb34e07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...