MAL-2025-184874 Malicious code in sonec-kat-fiugafav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f16ec554d587a5d1cd5dae8554c1cda2b5b4994cbe52341c9cbe53a09d4bb362 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183330 Malicious code in libc-ug-ataffiaafaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b62be54686b21b2085b19a0d16dc70210440aaf601fe8798b2989879a00149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183286 Malicious code in kiudt-acavog-agaicua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd2c32753b0e6c6e359ed6876d318de6f17f3448b22f3d8d8c44a1b98826a20e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lfki-afuhiugabanagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60cef66856750ec799b15efe9605bd59bb496936e0984a596a5ae3e5308ef9a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksgsdfo-ahksgasifsdusodan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a72bccff5dbe6ddfc1572bd051be1919bcb97f23658defa4830fc231f1c57b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilisiamo-inafuuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a1d6c3e20c0554d4e0e6c7ee9c07c825c32d5f72ca0d40cc27b585ed82fd2e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-ai-avuhusiaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f6455840f2464ef30d292a58254401350d08748a1bd05c8670ca3b70c9d4fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociy-ung-ugf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1f7669b1c80b52101cc2ce59d5e9d6e7dda9bde619e2530bbabad3af9280072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olim-ani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0e8ae5328d9c09b54afe92a4ed49508130d539863afd93bba56b926d596b012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifush-ugi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b67cf7f126eec1a1bd96bc9cce6467c60483f8f2cec6e435b522a7558f61fa3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-unga-fugiuficagiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d363cd08b158703dc6730cf94524d09d034c510149d9e3e645894803a0ab90ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-nofy-gaoaigaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dbcc72822b012d66661d2dccdd3fe8529d9693ac2ae09ff2b01113daa03f749 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irhar-aaeasdeadeasdee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81a22daf8ba9e34415b5f0086e2fcea39a798167e67872cf4b13af28953f23ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ub-jfgayuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88d79e69bf6256cdac226c5fa8ef6d19557aef7d7441d83c5ecbfe7305f89ec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifush-ugofali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86f75292acb1ae7bce1b1b28fba0c948939517429e265c70af58e19f15b47b96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tgacedcuadojxav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 777d8d3aef0035162cbb729d4df15fe93797e0fd60cf8d8956bb0dfec86dc0cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ubg-atg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34b176efc9e7e4e5b8a98de769bc40399b2ea2dad869c2b5405f228e648103c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lfki-hakumajiabusubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31f47abcc6f00e53b313223a472f4fb39d3866430cdf6b025cb66a611384d605 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ijos-afafiofihah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6d65e15a0869908e07e454b061705293a0b41eee75222b8b38bce13b245b8c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnuygri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae46962a7d26cf84f6ab8e4dfddf492438bcde436a801743bc4c5916bc7bedc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...