MAL-2025-185131 Malicious code in sonic-kulig-tgacedcuadopav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dcde3f50a15add27a8e2cede88742122bc6e6201c6542abbefc8f1830b5f59b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182370 Malicious code in imodiov-komfi-cafefgxa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06392d3e14d98b4a37caef048d3c590edef63669a2c2ff72b76db7fef6898131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184198 Malicious code in modasiv-kulvu-baiucaufaifuav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad2d085b354a8666bdc1ec38049622e580c50a4eb73f1ddd4cd4191b83ddebc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183692 Malicious code in manu-oi-gisosaug1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24ec58ba5e67f3bf59992e74f10e5b902864ec7abbc15f89368d74ee3b92f000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-olia-tabaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b8ba1228ccef19f867c58e572b8bd92e4d69db3d4e63d00b4d1c61ef00130c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tnadeaxwqcav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0faef3b152e4bb6e15502fa2da4c8c0368ef90810aa355abfb1c5b5d8260098f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-nik-hi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92912cbaeaa0b6954ef1e5142231830dcac3e204b0a4d6809c1dfd4e3ae6dba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-aknkonbyunaymhentagdati (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81d1fd47b6cf9c773fec84072687662038dd4709dbb810a762bb7c38966731e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avo-cbsav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab83d18269f22b80276b6429a52bfab661d216993dbc971eec6c0f01796d8d37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-koifi-cuidcavuaompg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8deaaa948e23729f6fa855ba023626760693c4bdd69c39cd500211fadbae3fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diug-damfoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a5a12237d68573ffeb4e992551fb85c49c193bad7c88f0c9dce2da9f03cca15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggmatondanggangyru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98a6439e1cf3bc73f18a6068209eea78029d3984d206ebe4379f4cf214577994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiudt-acog-fafiug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969034054167fa7e4f1c26d0bc110998f524ba803545d95413e45cc00a21d30b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuig-alakanjitw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08d7f97074b17d7e43a3a09076231c1b7fd094cf18cad5ca2cb6ce1204b16abc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bonijavuficvaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7aaf0697d2584cf37b686e1d0e0a2fe564f79758c494df6b6638ddf362fdd8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fakiugaas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2488cfb32eaf99439ec542214db23fc3c5a36ff4835141633500cce17fdfc48b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-au (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 462702fd1215bcb8c3180ecc922164b64d4a023352f90f4b018f1c7250cfe8d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-avcafivaivuvagavacd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f387025f08622866d5e7d334b2064e4902cbd4f2021c00e41571444e25268a3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-oy-giossi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 255e6ea008bdf289ccc982cbb9dc5ea078312988408a372806b462a2901ece74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oihg-mopigafaifc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f3f6c31e6aaa7dee2cb8b5f48a26e9e6ce7e5a1151a0e6e6be8b3e3c167736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...