MAL-2025-185033 Malicious code in sonic-kos-fusfg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3095d8f97d9c55f1edf8492228c9b787088e2ef26ef18be6b65ed20601b2a6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183567 Malicious code in lomi-fuis-fiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de1ee7313cb244e1081a64f00431138214500030605a0f8e29f51abf40a0d867 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183279 Malicious code in kisut-diug-danugamicfoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 233457f82c9d479ed4fc900a3acc9f618a5712b2be5486251f1285edde7760bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182466 Malicious code in imodiov-kufni-uavcseqsdayaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d65c43366ac720a9b7afc7e85e6b61a1c50590ae24b83aae135f5ffa67828cbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183808 Malicious code in masolv-avlo-civbsoifaufoiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85195e1aa88690d6f168a539e3635f0963eda3fd074d4ee6fce657e85129e846 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181806 Malicious code in avangs-olimois-noliadsdsgsgnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3578c5502cc9ee86a8c80a193c5431afa859d94e45415156731ce21ea0be7590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182236 Malicious code in goiy-ng-gufaguaguaufafci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b99fe4b884f047aa23b6688d9246391637e01df6d89f59fdc568447c37c866fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184187 Malicious code in modaiv-kvu-ibuagoufavaucab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0ce6af5950a2d9ed820ad76779d24f3afdfb21176fe019b4bcd98cf17c90286 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182091 Malicious code in gocay-guga-viguvfuagudivai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc54852893fbab3d935ac8923d01bb52877f963df369eb5934afdfe3e0539fd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-badadivucgafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eb4e0ca1d2312d9443fe207708edc002a34e7a509b8514a7e5a99e2f608c06f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-cocakm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 136f2f349c6e998a3bc5248038384d138ba5a11999bc95c2876c969c864bfac4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifit-dabtauzai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f146f9d9b58c878ccd462a8ff4596ae93b48ac14e046474fe45627d807a2e52f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-ffav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd2109521f4cf1e2ef52d8a188b6a937204dd81dbfe307ee127f62e77c59a0df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-nofity-gami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae35ef0cdb412e48c5e641978ab4e67693914eee7f5d0c188f13b5ed87ad040f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dn-olia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d7f98f447a8094dafe85d26bee1927cea6eef97222b21ebbb501faf0a279c5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kjt-gabisyf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 260d3b55346989877333b27161b6ce5b5035535ed9613c28895ae3ac37bf4b3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-difg-diwfzcfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e80114a249e5aaaf196bc710ee252667d7776c417e99efad81f8a76e7b1620c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-dfg-diwfzcfecdavcb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c107391f4fae6eac63952ab8b98da103b0fd585a6f0133161eb36b0f8d4b298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifush-ugio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a824e694bc52478b80a1af088300ad16a89d337f6783551edf6239cd1f57e63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-nil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed3df47ad2a0e0d27324be1b1eb1ed4867bbcd3c89878638a2e0fc04b4bf4d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...