MAL-2025-183688 Malicious code in manu-oi-gisisgo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 935558bf7fcba45b5e0f1ebfd079722900bc309adbc5580ac6495bf463d3991c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-kvu-ibuagoufacab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d3495b80b43e68f38bb7df3cfae7172378ca21fe328e951dab43b3716e0dec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-daiikiula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d3ef65039fc7a353372090aca9ccd587aa45c19420431666af472e13b4538ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kidt-aog-u (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b04cd2dfaed6976e40b9aace850bde71aa37048cb3d07e3740f8c07322e155be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutg-od (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e47db5b277a7baf757288c1e3743b38d5e56c72e5b52f72e37fc1c7d0f822b13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyib-givakisassuisois (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1e79c92737e4dffb2ec8076eb854664572d8614bae7fe30a2f04cadaf7dd5ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olioms-nolisfdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce431e74cd23b8386a78626291c787d772f3ff7bc4dc15c150b57a238a7d0e5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avlo-civbsoifaufoiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85195e1aa88690d6f168a539e3635f0963eda3fd074d4ee6fce657e85129e846 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-adisdfdglonolo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9411ff2084a5f0827e187044e29aba96973657d09b1a5b4ea71ceda21be6448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-kubduzika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb332a6946552170c04541bb1f22e0cb587de270b2280dd123899414cb96f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dn-ujokuluaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b32d39bf5654281f0c834f9a90367f5037efe91a3d812a21a0aaf89a1200224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dabukaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae0f58ea0bb0707ece8aa42f8bbf43d202464832eb806f4cd89d277b3a6de10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mok-luni-huojakiavggjim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 508b238775ba6c12a9726d4ff0c6c22b0e6556bd6ab46b40b8d34598da0a95ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184849 Malicious code in poliaoz-ali-avnuku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e1cfd751600102e1fe0d6dab63258b878c417c7498f04ff2fdd0e8a93bd74a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-ilo-cvaginhu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2483de072709579a727ca5b4be4e10328e7c3bb454687296bb6fac29de061731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tifuacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baa907b684ea26839e25114a7646a7ba78cf7acb997aff5706371991ac3b359c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-ogolia-inualumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f5a7d394174345daac9ba53c7ca8ac328935889698ca5cc0084e8fe4f226352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183709 Malicious code in manu-oib-gisosaugg1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 384b9f06728fbd8f8719b1b5692f380188b8c79c35bc8c9f6fec6772b69643a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184922 Malicious code in sonic-kaos-fagiufagugafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a411cc1cbdc5ce703bb199e21513161750d48fa206bb0fed944f0e4a33b84cda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184759 Malicious code in one-kiat-bda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ff330537a71dc60e3e629ba7b472c389a49709f85e90c37403fa6315224f0cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...