MAL-2025-189731 Malicious code in sun-bad-assert-secure-protected (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d895d4b0345e91c1f17b7dcbc0cb8bd298eccd311b392650ae6fc5dc7c9258d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190095 Malicious code in upsilon-sandbox-static-module-validate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78e533630891122508e162c5d422726d9d4e5f8d60c5a3411fbb538bc10a3d28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-jyyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d47dc2c1e11474712db84ba6e3effbc200467d07dcc428b27023aef7d8695055 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rsgustduet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf2544e9734a5d4be31355237278167e1daec4bca54503875bff6fbfe3fed73d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggmatondanggangru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db84f18c3c9957ebbb46ced2d12589fce23cc9199ee3ff8e40b7e2b25fb09cbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnuygugjkolujnri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153d01550968bd9b988141f40b0f94c1818b72edc502209839d1a31230ae5cdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-ogolia- (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26689f38edce438ae7b18ed3f3841510cd5c01422b7825f5ac519d3acbffccb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-luni-huojakiavugim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5234a4f70088802541d2712233078e3f8e610d790f1d4cad5ff036cead5e57e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olims-nol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 070457662d9e722929bd437d563898e0d14fcf904fb8850ae35c587e79ec6fd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-gifaiua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c430ab0014705c21b2a0f0e4eb3d6f847044423cd8856936201a9024a8371513 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oihg-mopifc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15aa163a62b502905eaca5f12c98831e7ac399b48292cdc9ae2f9fd500a3e1bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-c (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71ea972e1e4f3a4f1ada421e9c08f37bdf0ef96b780c4e0a0f1a4b70e9e1af1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avg-ijimaumfagaaugf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c70e33bb7e9a5383b3efee7b5bba811f3108f32f2b18d3fca8270cf71ed11427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-oliutka-tamaiki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af442c2ff3846a5d9a13343d7ee521f80b0e00653ae2d0b58a5615402064ec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodj-guo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85760257b8f161718b9ec21a2020206c7c6a43efc185944bdbe0a8874e4bbf7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-zpojozakuika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0528886ba111bc4f5482aba0786589aab3be654fef844b828281df49ad7d3c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tnaav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13fa32160447e2282be30ca23775904cbddc40bd171dadae53db61d60b41dbfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oib-givakisasuisois (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dba70864138c80b55f95dbc4cbdffa6951c1a6fbcc87745bbac17f0c1b63177d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kiunu-bivoycab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a061400c6479097e8768ce18447a2cb6188be5bfe8794aa7ac7d75b10a88ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvog-dnieamfnfaiyugpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bddefdb83d59d4f1a44c0d9761c90906271b27d395864a7c3f24928805c32044 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...