MAL-2025-181695 Malicious code in astam-ifut-daaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bac874ce8ed0ac0567c94f62f499987a4e165d0703aebb5ec4330686f4d0002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oib-givakisasuois (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2a154d42cdcdc9158ed06726425a9f9775b6a6a0b71daa05c67822b57a06a6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goiy-ng-gufaguaguaufafci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b99fe4b884f047aa23b6688d9246391637e01df6d89f59fdc568447c37c866fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183796 Malicious code in masolv-avilo-civbusasofoiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47722648a83e49f015a0770ceb44ba1b519326584f4c85c1dad2edb8efde368b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-ontcmi-lapiokamakasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84be8630b071df764360a045d09abe8803d9daa1ff92061915281a0fd443aa4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-ilo-cvaginahu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff28b98af7ac7a673d80d5a2d5ec49dd7051c1c277ec7a387cd668081d21cd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-agig-iguqaib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8baedc3d38b1bcda8ab226323d31a74ea1619506fd86bd551275ac1577166ce3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuig-alakanjinmahrtew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5839f723d7f4253cbae745a4414dd109cba4108cf87cddd0b415f0bbea257ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182856 Malicious code in itale-adci-ggpantekkkktololgyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ea309b320728b5d1716482a9052ffc23faa3021a61a5bfd9270581ed51c05b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181817 Malicious code in avangs-olims-noliadsgnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbfd36ca0cd3863fdc8b3c7038a2a77efadcb54e23ef8a306d756e93629a362b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184337 Malicious code in modiov-kifni-ufbaceuiacfox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c45ef6dc3a8d3054b23e0e3e09694839dc0cafde866565811f9612930e1bf84b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-dfg-duban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89e42f88a1595f21a0bc2101e12f805f8eeda7094b95a12b5bf0e0c33619626a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183246 Malicious code in kisut-diufg-danuafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efb552bb2186394012bf86335c402942eb575757974f1d993d1d296d4d0bf2c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183145 Malicious code in item-atim-kuja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 071aa6a7a2bddea05598f0b7d82a3e1a566590405c9df887a4b6b96608e4b441 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oc-gua-vsojfahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a71d77408f309598beb3e1b4a73ecafe1564b8ffdb2c1f6a41a2964267a8a762 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gis1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e71cf729d7bfa5955ea4c10c6503959df849dd9eac3919844f209b246476203a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-ugooii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30fac49223f8d78ced22a317ab773bb7938d76324cf9a59bfdf24d0ed28903bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aya2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84aa47ea39c8f0fcb038a758e19b324df522d4a5c4a70cb1f7d0731e32561a1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/susu10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb1a7efe930f70a9cc305bb5bcb6b2964d3a3ea17922ab0e845b81e55fce3456 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/batu20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ef860a595e2bcc8403080b8dc9a468bb4d036f2d1fc7f4cc7c1517db6b1788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...