MAL-2025-185072 Malicious code in sonic-kots-uyibajb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8841a7c35af7bad03e85806c0f5e6851a4470d5b7e4aa08cc64cdddd192a0655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185151 Malicious code in sonic-kuloig-tgviavuexe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae4704499b268df01d82e8e5775ebb598190127f353797d4dcb74fb3757c234c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oihg-mopifc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15aa163a62b502905eaca5f12c98831e7ac399b48292cdc9ae2f9fd500a3e1bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kjt-gabisayyngf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40446f1b372e49077050690b73c28f90dadd74f86facffdc1efd9361d2fdea04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodij-agafaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb446a20f0c17cf06cd01f4ef86fd758b638806e168985fe5948675190195016 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kit-gahuadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8592c11f2958f10cfc3205c12709579c98be9f0a7c9dd01e866a513bf0afd907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodio-agajonaifau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b05c3bf67a6c1b261f4747c2c02086b6f03a9548bedb924846a9a1bd034b8957 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-dfg-difzcfeccb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 382bec0263840f93e0e354816c4d3795e61f6f6d122e5528fa4073b635876189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitouko-ontcami-lamok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51ccdf9bd8b4e23a2f4628cc4aba68d9f4d57574145d87c98c0dab1211063d04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fangs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 289593d1ac24f278b6c055e5bbb16f2f22c7d92f89435264d3deaf4cbd9f729e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-doni-oldikis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efdcc3aa397b763ffe7b5608824546163ab036cfa64d4bb688b53777f8bc2522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifus-ugaiaubfoalfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75aea746b303a008dce774a3313f8e3d7c7a87a0e911fe29dd8d38257af021b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gisiasvasgugo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0996a21cf73680685f32e917dc1ee5e760ca2028f59efa45e7167b0cda771402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggpantekkkktololgyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ea309b320728b5d1716482a9052ffc23faa3021a61a5bfd9270581ed51c05b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knilu-bofavaunuffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9deabfb9250c6d0d86204c2df519f91b7124fa40f48dd1df9b71e58be3f34e09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-gugopa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9f656f467fae61c47e54da832eb593a4f58ef6bbdc9141ec22cbdf752d08a78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufauban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e69721e702d96aef8df87b80ed754155d544bc0a7c85047f03097b194228645e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-akontolbapakfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b59e4c28d8e43ff52b161622de727bad25057dc092564db627f4a12e58a18a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofki-afuhiabanagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b7b6d5c66d0ca5f9c4c2ab551b1d69b1dc9432e54f1674f0103a79766f00d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-agi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6c9ed36ef6df1a66b8853f690979da604f83f87eb9b6dc14e469a17cb8c54c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...