MAL-2025-185166 Malicious code in sonic-oig-moc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0b7e82b209e32cd2a845fd12734efbffffaa9ff845845a82cb59c350236de79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183071 Malicious code in item-at-labieagyoka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f9fb1e7ab2cc9e20b4a6033aa2633fa007ed4ad680e086fc29bec9338d4b1e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irher-aeswasdweaddeassaeeaefederdafafaadde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9d9efeee38d4f2eb78455cd5f30d9b969555c180bdde6c2b263d33ce8eea021 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-unga-fugiufcagiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fad9d9361497b4323311ac1d1771cb0def3393b7053afebaad76e413f927f053 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-komfi-cafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf61fb7dc198e99dcfad7398e2fe8e5b748cea89f56f4a2413181ea83b4d3040 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kulvu-baiucaufaibafuiav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8f7d88231dd9abba69a97148009280d1cb468d9beb93f2580204aeb6d762e48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodj-go (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d7ca5488efb8fdfea31367f059a6a57f749a6ec24b04b28b5683d8d808ed19d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-iliimo-civufaagvuafana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7001b58b8fa301c5fe403d1394b2afa0bda7bba69d26d406d93a00162155c357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-jyhfuyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad298c95fae454e9cb9d06bb88ae65acd4c9fdf80c948eb60001bef4376c9aea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiko-akuv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c817d0d8591bbfaa44ba41175e6de37627ac8507ef18468bf8fdeba53d756a68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oig-mopigfc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d13927444963a27d97eeac4b1854373a6fefa810c8c55625033729392862e482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fusiafadog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c5f6cc169daf67ddac03fc6d5ed1c7da3d7c058ee1a8e719b07ca9d0900e64e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvog-dacmak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86f2f5174a1e18987c4bd0b46a5ccfe94cb5268c3d82d05408cf09b5e53f498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185052 Malicious code in sonic-kots-fudvyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f490c13a103554411bb11efb1fa4f15874d8e76528f5f6232535bc51cbabe290 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182874 Malicious code in itale-adci-ggryuyegfjbsgbajtrnnsuegqytefbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77892ecb6c3d7caeb808dd31238321e3adb46885e519c4fcf176b1775b42a608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185216 Malicious code in sonic-os-fusiaffadog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed220a544bef48d81e84a2c43aa28c1cbf9f64bc496e4684bb1250f3c997f7b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183753 Malicious code in manu-oyi-gioafiiasloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2fc1acf0fe82ae20fef2414fca1b36ade8200ef4aa46bfbcab4e4cdc06d8887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181832 Malicious code in avangs-olioms-nolifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38129b92b47d1182a150a30815ddc2718a422109c2fd06bc89dbee6efbd3b06e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181607 Malicious code in astam-if-dalimianunak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f58b5ff7a371511f4fed1f1a61974aff2a1a7de1949a50315c376178f303010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183676 Malicious code in manu-oi-gisiaso1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96f8a9c63f2cb4e402a924766172f0ba5f3adcf2f6034c257680c99f1d981af2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...