MAL-2025-184960 Malicious code in sonic-kat-iadavgh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fed76a048ecac2c7dac9ac967f148200b305bb5a2bfaf2029f9baf46afb3e7cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184928 Malicious code in sonic-kaos-fgahfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b73f8891f6d355d950c0ad110cd60617e7e8fbd7f0c60e489c0bbacc2eefea64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182785 Malicious code in indea-fotdio-agov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a038ef5280f1baab03b009747ac2decea57881d7b7bbb08f6253ca3c666bd0e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-doni-oldis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 108fe741ad7c7087330710c10bb807812cdf241ddfd5847226061ff233662a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184982 Malicious code in sonic-kg-tv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c7a4aec9da523313a3a85468c45778ef9d29f837286ce994ba773be80fdaf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofki-afhugi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942adc79dc004d70587d33929b22c58cde880f20df88deda2c1753b1f2887fbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-anaumini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cf230fbb30da9eae554083e19e5afd5249c106761abda36efd5d2722cf2bb50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dabualikabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 515ca68d459ef3332387bdf95d25826d11caad6d4359cd253e259bf599a17a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183804 Malicious code in masolv-avlo-cifov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa4910e0913a88c744a4bddf68fb3fb276fb6b62e8c0729a572bcf5266ca8fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183726 Malicious code in manu-oifads-gsofait01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d038d86c6ece21c54210753a8cdb58c858ecdbd9e44cc9bb6e2f0800c65b1e92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181801 Malicious code in avangs-olim-anaumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 557d880c482d1d2429ed98e52d83d546a9744b8b8ff06497a22802d8ec8876f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184020 Malicious code in mitoko-on-lakiuoabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a68308160bfcae3bd51b1c51079a228b81167f0a009306f05b54354402a4c27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/defenmiftaikyy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90110b4cfb6a11264ab8502500cb0a8df72c198c3dcf962e32022aa0655ecc4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 157f29442f148d3b344103b45865c1b2ddbe2fc0b35ef36d667f85ecd3f3619b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01b757c718aa3b0dbef2035c79a7239c242bcced07415b7033dd523c7452d9fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 047731eff0d2f7ba46ae40a2ad3750e63f4f0ecad409b8dff97b234e8e9ac005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181313 Malicious code in @akunsansan0/karedok5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fc159d1d03e8704f2eb85fa2d7bfdaecc9384fbf7fb4169accd8e9ae348244a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-mibki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bf102e3d7c0cb2523c066d6ee8a3509ce547b487c06cccc5d80be261be63403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-py-nimoj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2600dc769088c18d8a9dbc829112bdfb61e89cec5b54f908a7d73d5c833d3e86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-lejfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dfff766b4c2a2cfd5689318f6047bf97e1ade27e1678f06610485266b481c82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...