MAL-2025-185057 Malicious code in sonic-kots-jauaab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d06d4723466c1e3bd2ad5df61b463384c37387cb6bb212c53ddc25ff32e72d1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183317 Malicious code in libc-ubg-atafuig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9003a6e9ac031dbdde456eb430f09ead4187d1693ce62cd58828b475feca18f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183832 Malicious code in masolv-avo-uucav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99567147933ecf3e30cf1291edac5c100d666bf3758e12b15e6c77046e572a59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kilan-avumangfaiab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01ec7bc9abb90e95b10bab82e5d9c1ae13f5c2d925ad0b9076e561dfa5735656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185134 Malicious code in sonic-kulig-tgacv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d05eaceeff54a24474b1ac0b324b1cdb70c2444eba0a31af22329648b3af0c87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181764 Malicious code in avangi-olia-iuaimai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f331bd8019189c04c173b78779085982ec74a5f5acf2b63874fac534888d43e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181643 Malicious code in astam-ifst-dka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d52cd371cb4ec205b7fd12d404e58554e2dfdc1e29febefdd532c852d2c62fdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183013 Malicious code in itale-dci-rrst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 516a72550ff613866477a159c686c13b980f4f2cbead71f34628c5052eb82419 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183959 Malicious code in mitaukailok-don-olikoaisima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dba13c6a066c5e958594e2b947d0c474e3db37c7f3981a75b4b6083e9fd1dea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifit-dabtauzai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f146f9d9b58c878ccd462a8ff4596ae93b48ac14e046474fe45627d807a2e52f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-avcafivaivuvagcd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fc5932a13ddfd41b94cc7000fd3f7c47c265ba7d302c8e2fb9a8831a2c273d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiko-avuhusibvaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6429f3d606080c77b846247494b9d82ba93c225dab94c644f52b4ab9f48d36be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irhar-aaesddee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f2189681ae1fa11916be32e4176d5937270505c77845e44252a9dbed50c6840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-alnaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ae3eaf7c599cd54d8f6ed569720a0093fe96e8a0e8252836cd007303838de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-klvu-ibaibamuvaavafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f684b879438cc51d3a1fdeb4710691d06f668dc9ea6f9191d7e47178670f475e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knilu-bofavaun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce816dc11a6f65eca315f11d11ea0aee7a6c6b651128141cd218469a1638001e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ks-fudviafyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9419477d9846ff4b3478f9382462018bf0729aa4c45a9e2770d8d7b71f444fa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-afmcauncxab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf2ce54743ad9f0510657689bcf11d6deed02e8d2e03dd6024b9ae4f1841716b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-difg-diguota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b31be14540474bfc673070ae1657d30b80558ca27f03c5dfcaf6790b2a6df4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihon-afbaufcaducxags (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8c716ad011646d708f6b91fcf355f892e7a3cb7b63dc0c7dfff006ad663de11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...