MAL-2025-181918 Malicious code in avarage-olios-nol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f825f3f8feed65f8d0a66c801da5995b866c7a3ae4eedadba4df7ff8175ac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183599 Malicious code in lomi-ifus-ugofaliau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50b8621a9caeb967e56935342ae50524a7b1c9330762047648a7789502165b23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-afsigafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 167ba2603e47d42800c574076f405bc601a59b7377615b051a0c3f4169af99fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kjt-gabisayyngf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40446f1b372e49077050690b73c28f90dadd74f86facffdc1efd9361d2fdea04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodio-agajonaifau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b05c3bf67a6c1b261f4747c2c02086b6f03a9548bedb924846a9a1bd034b8957 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodij-gf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549974ca1e02012dca57743dab30a7018e77769b9267e26599be9d34cbec0b2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuiog-adilo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b47584fa1128254475030771dc31b4f18c4993ae37720333150ae276c191d49e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-obis-balamila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2320b36181400963181123519e77706f30a16fa02e06bff3bc526dfb114f2b2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loibac-ubg-tuagaaigga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b67a0719fc449c66a05cdf90a5ce556d03a32a8ec190ef9f66791e58e8c51cec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-kubusisiduzika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3610d3526e38b6e078667172755e93660ec292d124f1cb67d082f4ffaa28a3ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ijos-asaaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65e5ae8e6f8f47abab95678561c24ef1c1a534a623d393e257658fca0824b17e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuiog-adifilo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc62c47e2d83b3f8f07afffa98b858b0f25f47d75faa8e4429b0703d560acd8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gisiasvasgugo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0996a21cf73680685f32e917dc1ee5e760ca2028f59efa45e7167b0cda771402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dabtami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62e5d3d14578a2a596702b2060c83eb6b2f05d1bfeeec977904859dbbd4b66e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knilu-bofavaunuffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9deabfb9250c6d0d86204c2df519f91b7124fa40f48dd1df9b71e58be3f34e09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-hykaulaygkyang (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 087b806d2234b7874d6ec9d8b0e19ac147445e4b285e06dd1b18afcbf7c74393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-ung-fugiufugaicagiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25700500945f75c86f967efaf490b68c741527bad83d4bf6b120aa5921e5e365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-on-lakiuoabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a68308160bfcae3bd51b1c51079a228b81167f0a009306f05b54354402a4c27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubib-gafub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 916701b1b6ad5619f5403a69fec5786956c7eb7800ef9d35ac92ba99ffbfcd56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-jos-afafiofiah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d04ba84020d9dfc8509e469969615a44d0136b85bf9318cd208335202bbf0ca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...