MAL-2025-185163 Malicious code in sonic-kuoig-timesexa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1defef4ff8e5a745d48d7ece087d36ad1f21dbe727e8b3dfc8b264c2af40e61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182477 Malicious code in imodiov-kugfi-comai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac79508ca47a94d55c4cc7547eef66fb8725376a30a481ed213b470698e7db8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182448 Malicious code in imodiov-kufni-acumnacfgteagefac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487ce730e83660af79d2a7e0d28f22fa1ccf0dcdc7fef64a2142a5c74b6b52c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183413 Malicious code in lobac-ubb-anu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afff5282c4994862959982ed0c13bca1d23cf25d10d80927dd37f392e860c593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kulig-tgacedcadopav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16d728a93c50c2d84388357ece1548f950285905a9dde2c0911c49e1e06fb4d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80218d43debe038bae4e822a495618aa2fb4ffe67d4c10ed73fdf29524ae6521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitaluaik-don-olikaisima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcce238f033b2175b177a2390a6501d040b725285c749cd917aa185c71bcca43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-favix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02a11b061c1c0126d7a376d4897c36d2d588630694a3022ad3f6a380efb8d010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-oliutka-taii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26870ec3dfe7116ba8c6d3fa509ae87026a1eac817ba2b983d011c0c6fe93e47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksgsdfo-ahksgodan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b671caa2c6ecf037f0352ebfbff81fa0713fa2e4726f04dce1fdbaa23206fdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oy-giosoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed7855dd702bdec2e4e6ae5894411aa79c1a842fd4a44ac44b8161942cfa4dd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ks-ahagfua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53890a966b324c94532d0d4d4bda7de02cc717eca2172f260c912b79f0ca9bd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-fudvitifagafyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8c62bc45813016f3b2b9c4c285e9ad1e3a25a0fa7ac34895eebd2dbce013ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-gug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cd1fce720714d26e4ea2cabce4e597beefb2e6944d86786afe73e3b3428b249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-za (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e18a39e8367d19426037963043a545c791f54b87c728504dd2bdc83987fb57fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kidt-aog-u (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b04cd2dfaed6976e40b9aace850bde71aa37048cb3d07e3740f8c07322e155be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-gifabga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6e7237b849df0a2fd1d39784362f22d3dea6e7da6f2e71c973776dbe21e511c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ug-atafiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cbf5de018164a3e9c96eb8f51d62e077b58e66f5f2808895056c3224ad8cd85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-gifaiua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c430ab0014705c21b2a0f0e4eb3d6f847044423cd8856936201a9024a8371513 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olios-noly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8ff019087eab047e7304a9746318331693c98a86234e14382d5f2771a8e6e8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...