MAL-2025-183670 Malicious code in manu-oi-gisag1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cc4d976ee460edc0c24cb0457c265d4f92a6a4dea2174602a6e47f14d259c9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182213 Malicious code in gociy-ng-ugafugaafug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cbdc87e17957cb2da6cdfa02455e78867dfcfb2da5d92738465892c560b7e40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182215 Malicious code in gociy-ng-ugufg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9584fd1a218d3b428069ffdbfff4ecedea8b6201d75d0e1c2b2db0773c663d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182168 Malicious code in gociay-ung-fugugaiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153178d79d8f294d315282748c95ad29cc79fe1d1cc4bb2edf4492306d28cee9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitokoik-oni-oladinaps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35480eb2926988e512fea0bb455f3c66b6ae05c6fce380ebeb278d48cb411b8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-afibanid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3860a54bc24374ccbf227817309bfd7daa00c6af7658f1efb6fbfaf992661bd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183039 Malicious code in itale-dci-srtrgrt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0823e059f5a84e200a92f74471d3f8dd30cf3470dc755a087641bed48d83267 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksgsdfo-ahksgasodan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bf529da0892989fff1061845ec9d40d730092e971a05923fc7b09a60ce3837a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oihg-move (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2c2a87911622f08206ba9746be6e2ab7b14cc9b587f4a9bc08bec6166f9ac74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kit-gahufaduuvufadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b5fb5b09142f885c187bae1379934319bb6d854d593af626f4fd97dd738b7f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182755 Malicious code in indea-fodij-agafaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb446a20f0c17cf06cd01f4ef86fd758b638806e168985fe5948675190195016 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tgacedcuadoav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4777da257641b501dffab30e50982cd92c3e8b65d4f9f0be3e5bfdbfc34ccc80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-omfi-cafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a9b47821808773349ba2be463754b5ecdd2f5c6ab091f7cf0e9b42339768e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knilu-bofavaunuffain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f2873c4cdaa8c8342bed7ad7c0efd320a2f79c6eaae060da0e7e7dc30da80f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olobc-uyg-ugoofifaduahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25336c1c188efad011f084e319b85211ec45c7cb7931478518cde7c44f9ebc3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avo-ucav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9760f79279f02a8a247b4bf2736c14e30ff6d531f73c618d1eb4835ae1c2501a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kin-afbaufcaducxacs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ff912c0087efe4e11ff6a12bc496608a99126131250e1a19b34525b360b519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183159 Malicious code in item-atm-kujoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6858429c39d692f93b472ac0b18d10ce9becd4589a086c363eb1b0f5cd655c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183204 Malicious code in kisut-dfg-diwfzcfecdacb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 852a7788c09cf457a5ff92e47f56fe4bd5db435f073b66aaa68634f97635652c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilmo-civasavum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d68cc82bd2170b58906eb8b70da08859c9faf3b990e04cfd3c07d1f256e0e91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...