MAL-2025-185137 Malicious code in sonic-kulig-tgvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6de0b6cb4cf167a07e37459c2d2c58d5037260698285a2b7aff74ccf671cd0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181806 Malicious code in avangs-olimois-noliadsdsgsgnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3578c5502cc9ee86a8c80a193c5431afa859d94e45415156731ce21ea0be7590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184258 Malicious code in modiov-khan-avcafid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41d2d3a6cdeea32e6d4256a7949b4bdab40e21e1310302812ee2624d03f85e98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182643 Malicious code in imugiay-avg-daiugadajuij (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c33be95a7c59e4bf89469a50eacc1cb34cacedd55f448b83554306515f5efcff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuidcavuaommnodag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6526445c66a44a004f5483383e84c7836ca55fb6dfa862aad544861c0b325604 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182175 Malicious code in gociay-ung-ug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb81e04a657f1fa8eb340576620eca1aaf37738aa8026e8a5cb9d59f0aff6e07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-uga-agidufyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1a9444a426b44ce29443f2bcd427532ff615d1d57d528ddd859750a2a23e8b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185287 Malicious code in tunis-kjt-gabisyygf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23cfba3db76b92b4910a25a24fc63a1210042693a6a7bcbc73443a6c481875cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-uga-viguai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 351d5fe1e7b8d21f66d8c2e9aafc40baebf223fd2ea16600efab09998cc92e95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184909 Malicious code in sonic-jos-afisigafifafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd30e3d1a06aa74f01aeac7b0ec398f01080410616ee45ef898e8a8756774fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuloig-timese (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae4f4e9b90a18cfbdabd41237615180be06561e6569bcd7bf8997a1f234b3fbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olobc-uyg-ugoofifadahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd53d7ab3970a8c046dddd72fd5cb3f1c97ef2146023c9d085414e53b6cb0328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kilan-avamiobn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1f8d56e0920b30aac2b8f7cb7461fb76880c4eea372e74824741a274e74a1f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kt-gabf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ac5d3c56cfe862daa57ad24284b0d5390b34915dcb7b97bad1bea73095dbb3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-gaub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8d7c0b8f5ef35fb618fa473047b1032d67e131366c9de9b6f3fc42cdf9f478b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1ef4df8c7a985e4775362f559e989f2b519d0e15ef117c35b6d6396a3d52d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tifuacfivaffacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 591dd64584291580f26664df33b5fe4c55c43142d65c7ca348b2d6e1000e6fb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edf1bd8d37121ff0f0380675e8fce502df260236f237345d5f2a17852f99a8ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182529 Malicious code in imuay-agg-iguqakuraduidb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20a7d13ce843aa7f030274cef8c837093afb41ba64c298cc675d96117b403183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184777 Malicious code in poliaoz-aiko-akuivaaun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2453c2017ea392408a551be8d6681442185c3f90cb5190e2729f7d4116cf0103 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...