MAL-2025-184863 Malicious code in sonec-kat-favefix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6765ce51b839f6ccbadf83426629081f21869aa35fa11fe83300e8d72324bf30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184398 Malicious code in modiov-kihon-afbafgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4538113bf3a820fcb303ed3a03e67fdcbbcf8f4b376ab8a9e6fab986f71b15c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182541 Malicious code in imuay-agig-iguqakuradidb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 800f812cb8c7c956b479a1fdc3b62de60e9db75ab149f3ac3fd4a35b778e8972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183911 Malicious code in masv-ilo-cvsm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c4753507136809e70d169b09afca830c2ea1136b7cfe11c4b1863dce2b6e64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-fusiaffadog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed220a544bef48d81e84a2c43aa28c1cbf9f64bc496e4684bb1250f3c997f7b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-avcafid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41d2d3a6cdeea32e6d4256a7949b4bdab40e21e1310302812ee2624d03f85e98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bonijavufcacvf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 228de940dc4064ee4dcdea3ed4d3aeace7e3d6fe1ef1553c7fc440c465e7bbc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-koifi-cug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fbfad4fe7e9f9f7610e4d23f4f154a69cfeda95b86110858167de9d640fa3e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggryuyegfjbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c49bb2df6a5269b255f6360543df1a830c0ad775c6f1398eddbd88b8a21ef42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kit-bogavoaawfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 529316016365cce39020d0962a12d41ee3036405a1a7b330d6fb70132026fe1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ub-jagf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8867d5a4adca4470b49a9ada07cc66bdd8d33802fd7b6715f89fde1562f2967b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufi-cocakmai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ad884591898c4a41f26169c48a3461ee27d2162d7e30179295f23422decc966 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-fudvitifagagafyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 299c954248d7971fbf8754c5d8bbbe93ae332b2219a39b0ac6bec04e0d74fb00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-afid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84182e1458a36461ee751b3a542facf2a6a3f0a495320d53dfae84a95c729cd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-avig-iay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d98b9fbd72407d15b9f8e8b489150dcb48696ac9494d0859a00cde525033dde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dn-olikiakmua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36cfad99d24b0cdbd85d9b5afe158478c775407a096f2a48478915f7f42a4df2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitook-oni-oldis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd35b1f8b7638dadd362c9b02d3f599dd973f82e933ae0619eb1e2f8a886c73f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oib-givaias (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42fc5508e173e1e1c07c49c12ba0540ebb06f01ee804254f22877a5794a90b91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-boban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35c7398c66159c926bb34194488f990d047608d573118166348d8c5dd76518d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofeki-afahikuanaugai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bf6929e7bc03287d74686b0bb8f0df2e7cc90c861ddc2a516f2710e6b8da008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...