MAL-2025-182057 Malicious code in flights-tuig-alakanjinmahrtew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5839f723d7f4253cbae745a4414dd109cba4108cf87cddd0b415f0bbea257ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185243 Malicious code in soniec-kat-icfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1828c8f3887e4d9dfbfca8eda7c3c89cd20bb9e31cb5034d43bf4006a79352b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183787 Malicious code in maslv-ilo-cvaginanavcuovhu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 656941ea059e1a32ea8b0a4298dd11fb63992a79bcb320facc3fcb2b6d39de74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183813 Malicious code in masolv-avlo-cobasvov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 106ef3fe8c68cce1f90a9bfb61593399acc310849cd1f121ed05d40dbc9e014e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182608 Malicious code in imugiay-ajvg-dnieamnfaupa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b93999b4fee9a350d349f3be5416709e6fcabfe9fd43c4002a43980f3f1dfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184990 Malicious code in sonic-kig-tifuacfifav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbe0bbb195ffa351c64f94db5aec0c7525c412734d96ee14834b612ea3fa2294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183421 Malicious code in lobac-ubb-avigiyafagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa426b17fdd1354153f17c4e22c56ee256628a06d468bf0c8914196e9e2ed9b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181650 Malicious code in astam-ift-dabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c828370b3808adc65b074676ce6c99cbc485141dd72913d9262a0049a42e4bf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182199 Malicious code in gociy-ng-g (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e65d9ae0221fe77c23b5f4805d4632cc5e865be80c7176e4c7f73a5bd38ba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lki-hakumajiabusubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10042c9a7903e8a79c8546bf5c955bb030e12621f704fc796406151cc132eabb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-diafvoatav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 756b4eb0f23ad35998c8d068cf06126fa62e174253c89283f011c51c23eabccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-noy-gitsogapo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f5e7e4abaa93bf15bca06857d17ded1ead747ad733b68d361eddac437bfd95d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avo-cav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 755086256afafc56a0c74fcc0e648bf12bc841e6e63ef64f6fcffacdf3b10172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-adio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72961222466a1fed7649e3d873db50ebd763959952762e8f564c9c1293d06773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-labza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5452425ea102be4efd47b4be0d2401eaaf8594db68aefc325a94be41b3e7e65b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-nik-hji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62ee188d659ad3c564fd6cd258d388db6a0c693ae1a28a9b3387fdbf881a9329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuis-kjt-garfuaavimas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ccd0860ddb5476a84a051e5bfa786ba1fdf3e35b9aafdc76f4ee8abc5f129b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mugiy-ajoig-daicutaaajk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddab30a7814fa4518f311d92d0cab99674df9ce469a2ca5547cf7b4ab8295660 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kiunu-bivoycab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a061400c6479097e8768ce18447a2cb6188be5bfe8794aa7ac7d75b10a88ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociy-ung-ugafug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1cb433b15a19436870e5f482566efcac1def131e672c9715ba5ad5c8809022f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...