MAL-2025-184719 Malicious code in oloc-uyg-uhfadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2356d9e56fb37f149f3502ff33c5c161fdbb221002b2d692a770a3dfe1b0dcf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181958 Malicious code in flights-inlutag-idsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a81d3762cd8db4f574437e3d530cf12aaefa09bb4e01362a8976355a8047a3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183330 Malicious code in libc-ug-ataffiaafaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b62be54686b21b2085b19a0d16dc70210440aaf601fe8798b2989879a00149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182826 Malicious code in itale-adci-ggmatdnru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 573632d42ed22425fcbb1320544b205f57950153e42e2032d7afac363db066a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-koifi-cuidcavg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9b7d213196d1b4d4cba313af6e9b7cfa1c299172ba9e8ba9f577d5d55b52980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-ihcfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5250b5e6822c5be21b3e8fc6bd07101e15c88dba9ca1c04e91007797178ed4bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183690 Malicious code in manu-oi-gisoaug1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0210cb5e014b0eaac4ba2e250ac799fee8a15265ed98068f70bf86b5db9d562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183152 Malicious code in item-atim-kujaulahubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72a30bc68f372e5170f6966a3a847107ab68b8a023b8b584e0c02f74cc5caa96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183111 Malicious code in item-ati-zjkuika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbf0b1acc834a2a9db6193a8f142796f4515e084639135f0a894bc80df3e83e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-labza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5452425ea102be4efd47b4be0d2401eaaf8594db68aefc325a94be41b3e7e65b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-badadivudcauagafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01234253e7cf348372ec6d17cae3db681252c0610865923abef6d22d1702c027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183467 Malicious code in lobac-ubg-ae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 136df813ac48ab38d81ccd969955c7078762d3c9857fc4a8c91e7256c7f16408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185209 Malicious code in sonic-os-afsigfoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 617823e61c0161f69d2288164487635bc59c10beb13073a1b0c75754f79b07c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unise-kiat-bogratatipda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3812b24e101b73259c6aeafe4be29ac333c33e888bfd1ad598ccbfb5f654890e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-avcafiagfavacd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53135e73c490059198854ae98d7a7a06dcd674aad1cf14c88f392ceb3729d2d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 954eb5693ed6fcebb892bcb13a39ac2e1db4b7594e0f2f354e5e065b6f659f8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geulis94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae36761dad348bfc6af5a72f56762969382db878c053676dc81c54d549f8df2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cc55eb5e156cee9cfbf89d2bc3f479e45bc198b052b5286950f1b9fd40d68ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b24d9c1fb43b93059d24ad0598bc636e7b55ca4614303cd93a78edb37f0da9c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gun9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cf7390d614ae3abed79bb62e34e694023ab8cd3c4ff71f6cd442b5018011610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...