MAL-2025-185038 Malicious code in sonic-kos-fusiaffadog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b3b7104f8420cfe2541e7b9cc03b086b35e52e535eadbd967cd57f0634fd9dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184563 Malicious code in oc-gua-vsjfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c8dc7b6633a1c34fcc3cdd0dc777af65caabb3193645db070f9efc96620628c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182127 Malicious code in gociay-uga-agid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f7a1a89805db8b885fa4a8438e82a38ea3874991dd76334ad285c013f244a69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182617 Malicious code in imugiay-ajvog-daicutaamajak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ef2d5a8108eb638005dc30b155a35f027d24913c586dfe9c8e882ef10cd79a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185192 Malicious code in sonic-oihg-mopigafc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1aced286bc188ec0bfc18d8e9c3df582b3f3516a95e295e015905e813d01dbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181733 Malicious code in avangi-hola-inmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9293db301410cac76adcf7162426dc1658a250b23d728aa052716c95709f28e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182638 Malicious code in imugiay-avg-daiajuj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2fc4e231c40ef4ebb32a941888abb17601bb68d4a7d2d51617390add70c0562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183013 Malicious code in itale-dci-rrst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 516a72550ff613866477a159c686c13b980f4f2cbead71f34628c5052eb82419 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fis-fakiugabas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d8ced8477ad96bccf986313bc37c6914b558d9c6b9adaef7bacb48942e2f16b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifit-dabtauzai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f146f9d9b58c878ccd462a8ff4596ae93b48ac14e046474fe45627d807a2e52f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-avcafivaivuvagcd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fc5932a13ddfd41b94cc7000fd3f7c47c265ba7d302c8e2fb9a8831a2c273d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilisiamo-civufagvuafana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 978f14e85f75ebb82ed73b6484c851fe62831b49014d200e9bed8925a321c78e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atm-kujolioaknoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b44b2303aa44caedc3c259a2c5770f72e6bdc634a2fd66982b1091474d72e665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-alnaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ae3eaf7c599cd54d8f6ed569720a0093fe96e8a0e8252836cd007303838de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oy-giossiosi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9fc876d5a7c7bb9e75922585dd54459b76c0c740d0b56122b069a130485242e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-klvu-ibaibamuvaavafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f684b879438cc51d3a1fdeb4710691d06f668dc9ea6f9191d7e47178670f475e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihon-afbaufcaducxags (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8c716ad011646d708f6b91fcf355f892e7a3cb7b63dc0c7dfff006ad663de11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kt-gahuvfadufadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1cf8abe4a3f607e0ccbf7a654ecacfa3b781fc04de802a88234ea3d1a945d57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fusfog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df3526d8756b30184a19ff6014ac0972fcba170d20b7268869505b7e1ffa4372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-ahagafujiha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 845b292470eafc13b0b4b09fc30b37e4bdd96c5beb6974b69ff9f02a14dfec58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...