MAL-2025-185217 Malicious code in sonic-os-fusog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c7d6aa337dd2e4044a2de8d74183f09effc98e1e611a0e77d4665a5b3820d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182090 Malicious code in gocay-guga-viguivai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e25c3ef3506fb41d2870b774dd0e599b6bd20fcdf384b3863d2d9ed0d6f10247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-fdawe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7591ccef9074209837bebcafec0aa7b2f1a51f7d509ce69c3fb12d0e0c605e2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181988 Malicious code in flights-lutg-oida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e1712377801d05f77a800d3d4cd1b1357039593718297573da240f66b6e0acb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/defenmiftaikyy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90110b4cfb6a11264ab8502500cb0a8df72c198c3dcf962e32022aa0655ecc4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ed2a1f9ba89157dc64bc71ad7062eaa94ef9abcf555c71a2a27832cb8de2506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60de3543ab6a45e3fe67ed8c9379d8ba71571682ba5c122492333e510c6a2ca6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/batu5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab782f49cf4b697f7475c3b8394c8f4ae96f8913073367c13e16251ae610c67d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 356e8112859049cb5a85dd3032485f2343078e48b24ece76a942837b778aeeb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26bb9f7b1f905e65b361207481f6bb2a7fe5bd25e336ad2dfca52cd695ec1aa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0ceeba3197d0587ff8baf6270a00bd489eda27c6119c10d5a8ac3d00932148 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181514 Malicious code in pucukharum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b7d1b06b0c469a6a09dee64d915dc0425c87cb75418ec5192d9f1395e686b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181495 Malicious code in gun1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e39996ab245b744a18cc86ef786e37d389e5830144e272e9af07c90f6871a0ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181223 Malicious code in @akunsansan0/biru36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc6c9579cd3f7eb7e054f89752f191890f7e64c30bde3208fd5e04677ce375b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aya2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84aa47ea39c8f0fcb038a758e19b324df522d4a5c4a70cb1f7d0731e32561a1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181199 Malicious code in @akunsansan0/biru14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece4cfb5b7f019f9ff65727dfe20df929ae4ec04fb8703a1c9c26decd143a579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181529 Malicious code in roti22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93d81a69640cf493340a1bdfa71f21de8a0502ed44adddaf5fc2eedcf2381927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181415 Malicious code in baso57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 401ca59622c5fba1b53edbd802f13fe03318c4a80792d0b404c385378cea1310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181519 Malicious code in roti13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bff30ecf8de84fa98fefe9617c7acc1b424e8c5328ed7551e432ba8c22e61cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181273 Malicious code in @akunsansan0/jorelat6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf57ad73779cbb8da2740de34e92a8cbbc3d23fcc0718aa95ce0946118a1df25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...