MAL-2025-184762 Malicious code in one-kiat-ibudarda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8065db43a1366dbdacd6cc550f22109860a6cd1d24c8114c50b0981117066d13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181925 Malicious code in flight-iltag-ziluma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39bbf21c51ac117463ffa0a4359224ea9875f0b0aa09badf2a853e95dfcebbee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182156 Malicious code in gociay-uinga-ugugfgaucfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b16a48397ba402b51d239b43c9b80e4515e06b4e05c39e2da2672e02d31e02d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182593 Malicious code in imugay-avig-iayfuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 059598bfb08cdd8226340c717a0a6d97d2b265f66f1d9e1e582b115739b46657 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasv-kuu-bof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f717336c22a99c38999ce8a5c43a91d110d1d66bea78388669df09fd52b446a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvog-daicutafamajaak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c11d13985079af59d2c793d3d35a314d349cbfbbc8b4b1e99d0d8d3e127aef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-ofi-cafacevavisvoetfmolcabyca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be164acf551482933c84582319c8d7d52329b313f9f6bb5c0f77ce40397ecef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-guga-visagii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a56358422597c3576f2ffa8866a1327bace6785e19bf73d984bd35eb4b0485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifush-ugiko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af537ee3a51b73950e8d4ce70be057b35634b8c10abcf383d3a3f82f0e71ac09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-gifaisugkda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e503e18d6cc0d9eb3fdef9ff461cad20fedcb0ba5e7b8471be3a214407e1eb58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oig-tmoeaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6843a13ea8be8df8f4c442a48cd4e7706eaede556b23ad18dcc8308463dab687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-jos-aafia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf93ad103a765f619a5d787d008a6c1d3c171a33b553a2078e8f72439f43662b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-koig-tmoerocneamca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65edae69fc8e01d29e71c73921cf786e09494e6ced741ff03607b8f21bd6b506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-aknkonyunaymhentgdti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fceb9adc0ae446889fcaeccdefa3fd2a02a982245908f0419710bd481f4dfa30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-difg-dig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ba6ee5ee484d0105d26a2b4071e96eb8bd7b6833b77b8b0b0c5a30c7f695e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fgfao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23f975b27efc7d6f1959d48dae7b878c892e05ddcf8730d116c5b62b3a18821b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodij-gf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549974ca1e02012dca57743dab30a7018e77769b9267e26599be9d34cbec0b2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiy-ajvoig-daicutafamajjauak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bbd0d9254d35e1f164bf5580e528322225bb809b3e3d3254335a8548f466077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-adisdfasdglonolo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc2e8599e48e3e0456b2652cec82ceb0501a796c275344cef8dcb9046fe8eb7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodija-gifbaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 949cdd45b5b7c01b24c7368fdc5fd3188c433c78708fc7ea0accb372fd946b20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...