MAL-2025-183909 Malicious code in masv-ilo-cvaiu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eae5620eb6d3f912780804378e364b84700989eccbbd349ec769af03e8a34e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182578 Malicious code in imugay-avg-ij (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c40021360c8a2cf4b329a3d5cbdab5fcacdbf0d2806828827dfffb0e24494184 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avig-ijimaumfaatugf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca8956b5ea00e74ad1386290bf89e189f4c5c2f97452817cc6e6835a4363d3da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185149 Malicious code in sonic-kuloig-tgviavue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e74b72625ad407537cd907331a3467804c15158d037d09cab9278ceebf2cf3ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183343 Malicious code in liobc-ug-afayafuyacuicig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6342cd7fab97329c9e3e86cbb1a21dc269e9447fcc811495e5711cb25a1af142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oliobc-uyg-ugah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9757467f755bd78974e6c2735243dbf38866d583d412f0d31bab4553004c8c28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-giisof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c6f664533e27616ab6aece0c5460c19fcedb2cb0f29d022e80fca755c402a9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oc-gua-vsjfhi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5931ef239366ba8ed82f65bca55d2c82f3575c2b2121220ff92f1eed2bdf1177 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitouko-ontcmi-laok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c20806e0c672cc796f2ead45854ee7ed4526e48a781b19592ffb4681ea73921d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilmo-civuaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adfad057457619f4dadcfb427a30bc1bf296e9c80a6e0b70fde3281197bac9ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-uhitaggadtusafadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a5b671746f78f9c3594bbd8fb7a857adfc8e76124de546e32164ee7151f5671 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kaos-faga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd9db1af913ccc883dc1136045eb4e6bfb6cbb618f1b8ce78f6cf8f0f1af76e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-dfg-diwfzcfecdavgecab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40ef1b07add413255afcdb12a4d441e64fa8e8c6a5f4ea30b8e299b2d35c9131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-ugoofifadifuahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08cd6b4f7de85138cf7544b10638d45051e095cf215d447a534bba6853466974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kugfi-comoldeoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd65e05dfbed8e91e9ab9321298e60d4453a6e1803c74cdd66e27a6a0d0c75ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-koig-tmoerocneamuaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 243831f9464c3e4928d32905face4f80ac54e1f07730a2ee50cca1f8a7531f84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvog-daicutafamajaak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c11d13985079af59d2c793d3d35a314d349cbfbbc8b4b1e99d0d8d3e127aef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuidcavmnodag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 046f46f4fd918fd34a80115ededcbe7cbf40534e63a2a30dcd960908c779fabd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-fagufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c26c50384b65dd066fe150918ea95622b310dfe095a7d2beeeb21ed057aa5811 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184549 Malicious code in mugiy-ajoig-daictaajk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e4b9c472798f79684100aa5b61d4d0266e3ce8181a4de19c3fa10509b28eca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...