MAL-2025-185061 Malicious code in sonic-kots-jaufjab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc52dc2a45ebda69a6f7888386fb9c80f7f44a8b20f4f50335ce735bc9e63d42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182285 Malicious code in imailok-ofe-laia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a0f538f0ea524016ad603b35a68e73fcfbb7c82b6ff4b7a9eeb995c062826a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185137 Malicious code in sonic-kulig-tgvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6de0b6cb4cf167a07e37459c2d2c58d5037260698285a2b7aff74ccf671cd0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183598 Malicious code in lomi-ifus-ugofalia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e49f85980110fcabf1d130f5057ea19c66934c1cbcf05a3dc59c95fd1ec28d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-foji-gisagabuailan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3743809c2bce82ff4e88c4037a638396698490dd8248caaaacd112aef758d44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uga-agidugaifyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feb2344d8a0b6a0ed2196e8356ef576d4daf84c1c180d8190ff48bad216fabd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilisiamo-inafuuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a1d6c3e20c0554d4e0e6c7ee9c07c825c32d5f72ca0d40cc27b585ed82fd2e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociy-ung-ugf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1f7669b1c80b52101cc2ce59d5e9d6e7dda9bde619e2530bbabad3af9280072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fis-fakugiab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca23e3d874a7c1c2d70e509bddef56c77f9474b34f73754c636a332f6fd5bb37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-uga-agidugaufyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9ba8ff76d9956eff5cf480bcc04f4746194bc9e0d91b4c7cae6d98317af6e1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kag-tgvb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 248eed230e4efc313942713dd46334818cd9837d4ed782c4be3bdd5dc1694b46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olim-ani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0e8ae5328d9c09b54afe92a4ed49508130d539863afd93bba56b926d596b012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-nik-hifdaguah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f81ba7afc6ca2b90aa5f1cdecf2e1db7603acfa27971ed4bc333888d249278 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifush-ugi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b67cf7f126eec1a1bd96bc9cce6467c60483f8f2cec6e435b522a7558f61fa3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-foi-gisagabglan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26308d8cadb7c2ec9211c1ba8c4ecc1cf0e39d16871d360cf953f18798cd51c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofki-afahiukuaagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01e83920cc7e9fcf4801a92588e5491c7f5b6d8a94b80a9b33a4c0443ca6c878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-nofy-gaoaigaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dbcc72822b012d66661d2dccdd3fe8529d9693ac2ae09ff2b01113daa03f749 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitouko-oni-laok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4c4bd38beb241102ca13f52599f59e4e3a513964e1ab40983c71806b2535046 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-ogolia-inualumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f5a7d394174345daac9ba53c7ca8ac328935889698ca5cc0084e8fe4f226352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodio-agajona (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cda5fbe83d8e48f32f62c3b3de4cd4ba56134f6fd6c61a959c7343f3c33d7a34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...