MAL-2025-185024 Malicious code in sonic-kos-fgahigyiafao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e705bcda950e4909c55d3c90c2fc9b310702188ee91c5c22b25b69f66d0de4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184833 Malicious code in poliaoz-aiksgsdfo-alfdadgsdion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90cf8764902ca00b878c7a9a823321c1e98e7cf995f29d54bdf31c48ec11f585 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183173 Malicious code in kidt-aog-ufav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bb28371e59295a4812b9935160f3512a46af4d6a7fded2b098996bcb6539874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182203 Malicious code in gociy-ng-gufagaci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ff8fd99ccb70e11604d3a4cdff231c55d14ad3fb255f8d39948e5bf180c7357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185203 Malicious code in sonic-os-afisigafiaafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e316ff13e7ce911018f797ff6e1a7458d8a82068d1718a452ecb65c20dd58407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182966 Malicious code in itale-dci-fhutdywehrbweyuftsf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c2f8a673aaa55be562597b879e7e4d84d0cba07ed83216b579687a5dd393843 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182626 Malicious code in imugiay-ajvog-dnieamf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ede20596112af2a2c400d9bab2edc171a39dceebd6c4ee2f537260d36ee7282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183526 Malicious code in loibac-ubg-tuagaaigga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b67a0719fc449c66a05cdf90a5ce556d03a32a8ec190ef9f66791e58e8c51cec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182060 Malicious code in flights-tuig-alakanjiw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea7b2adbcc7346bb432a536f02ca7adb71a620b60a4a5874d8b0aa445ea61990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mugiy-ajvoig-daicutafamajjauak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3090795eb14acdc5480c56f1795a1eba2632f750ccd7e5fd4aa8d131b624a71f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodji-gigaiuasgafofia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a36f3fd648020569300f83eea011de524721b352402d7f207998db60ccc9d3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kubuskuaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b422a40e06f0b263bcc4348df3c6a6ed30ec3d8331a38ce649a52ae134755b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avig-ijimaumfagfaatugf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe34cfe19327d5b48e1d9dc314b437e9def5e98003cd0b5a129776329fef471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-jaufjab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc52dc2a45ebda69a6f7888386fb9c80f7f44a8b20f4f50335ce735bc9e63d42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufbaceuiacfofox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f970627debdec27022647988d1dfbc358c4c55ab1ea325875107cce4d5ded632 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kt-gahuvfadufadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1cf8abe4a3f607e0ccbf7a654ecacfa3b781fc04de802a88234ea3d1a945d57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-avcd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d27af0f513ef5e06d7607e9ef91d743b3e42098830c214bf44a9d432f19ca2f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-digokianla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd16a56b50b1f97dd527d08b75e12a787dd5050a05fb735140ae5f052f098471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ykhjyafizganol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b2e1439c67953ace95b288218cc23e94b9a84c7576e7ad01df84720a527e458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mok-luni-huojim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34c051e4ea120819935ae5ffca82ab84c416baf59ffc13ef7e2ed5c7af165608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...