MAL-2025-185119 Malicious code in sonic-kuig-tnaecav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c71fa47a68f595a50fdca45f557fbdb9080e71ceb4fe5c3f057b7f098de9f1ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182566 Malicious code in imuay-avig-iayafucmff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dee116b6cd8d6d4f7d8a3a178c86becfa2bfb6ce3b8387b70fab7e9f9d61860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182753 Malicious code in inda-foji-gisagun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c55405319a243dadeb48c0ddf5858756cc0eebb7df3600c25c86b98c781e755 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181944 Malicious code in flights-ilutg-idulaisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffcbf58c2e44ed2007382e48ee9a69fe1b38e2feb0891a7a6a8ccb7810b3d473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184175 Malicious code in modaiv-kvu-ibaibuacamuva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector badda2c6a7806226994f65eff75d9cd1a4c482208e31c8f32a59733625ec5fb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182598 Malicious code in imugay-avig-ijimamfaatugf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1220a8a7c027ad0cd4c14a1b330e82a51c106fd14f7a69964bd22c8839e72326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unise-kiat-bogatatipda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 499bb27e127f60e7a75cecd65f0cf0004464bd4eb08cefea1d9bcdb126bedc5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubib-gafunb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed1aad346e15fe331b7fb58d6ecbf0f7470089a66e1d65e91c08f7ecfc2ed8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-avg-ddafgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d0178294d148922a29cd2d674a90023b67d1bdf7a7ab53f62ad56105bbc3476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-zpojozika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87a91ee02dfb78172eadebec4823ebb2d004f2366bd0d1ca6b60f80cc80831f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-ag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 496831f1173e1f891085affbaf362424dc416d7b9a02fd4544e117f722bcdeb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tifuacfivafav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc53fb2fceaedc62007a2ed69f01d766dd5aeb102ab8bf91ca84f15cb40ec46a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-don-olialobasoina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6dabba80bc224b0c263a8900742caa87ab40eb9093228fabea666a2398b0e1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifush-ugilkfoabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8d8e271f439812031adbc9e5e0eda6e52907d3fdbe7e9bc29f41989df28bbb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gisio1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 135c5cc13110f149097b0cc72ec43e9b1cf4eccd76d9c0f02750b77a1c5b5ac1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuwabimal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1e33c0c9e7e7b530d5c04ce3c629bd7a349cb4c161d5763b05653e8991e390 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liobc-ug-agufiaagidug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5fae5c415bd2a68f4bd1155d61bdeef173b8e92d8ffb6b4b21acf7b9f0e23ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-kvu-ibuagoufavauydauacab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a36c8c171a9c82155d81f432783f0b9f60e07fa49cb9e2d6cba3175da0df782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-ali-avnuku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e1cfd751600102e1fe0d6dab63258b878c417c7498f04ff2fdd0e8a93bd74a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fusiafog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efc5260812eb13ff8ea62e327e3b7b45217c3f9b1c6646edd9a3cc0eb869a3a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...