MAL-2025-184944 Malicious code in sonic-kas-ahagafujihujafdha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e9b856ee6149b82aca505633f8ad8666e5bf3f4b23084c3b4ea1abc4b28086f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kiuu-bofaufni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e3041d9de753e1eaf8b372738008f9e7f4285f6eec8f26e6deeb301ca7d63d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-diakav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6e72723fd60f6fe8c9b657414bb697e95f4c8bb06fc64acde808f82e1462272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-nofy-gaoaigaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dbcc72822b012d66661d2dccdd3fe8529d9693ac2ae09ff2b01113daa03f749 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-difg-diwfzcfecdavgec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5b922952d78141366ac20d4450de0d50e712406a9204a1cd227791a4f2fa379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggmatodnru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 840d91dbac328559284f6498641d488f142b63a73b5581cbe6c51cef84875584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181903 Malicious code in avarag-obis-bidabla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63893b5c2dc03b3b9cca4ad46bbaf7b0b797fb878b8cff9509029f9f050e2d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atm-kujolioaknoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b44b2303aa44caedc3c259a2c5770f72e6bdc634a2fd66982b1091474d72e665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-digoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0d6d21ae706e5023825f82b0fd7dcf63bf9103acc2f0cf46ed3367c71db264e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oy-giososi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccc0d1e6df2737aac6102c3814d44466300ad77f0df5a803f134eeb6dde93281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182228 Malicious code in gociy-ung-ugaugadsafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72f9c427af48a4d09563381880fc698aa1a58e0972d188e06120775cc90ba4dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d53f6f4f30902e510ba26c4cadf53a24b0d3b9bb2e74d063b65832a14b67f265 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183205 Malicious code in kisut-dfg-diwfzcfecdavcb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c107391f4fae6eac63952ab8b98da103b0fd585a6f0133161eb36b0f8d4b298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fis-fakugb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0620f04e87ad1df634f77641bb527f6e6e2002e99dbdac7976c4a56af56a3135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-gioafii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9212739f7d65e80f6ced398b648ab78ea7f437ee6fac76e602ef524c71ea01e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183104 Malicious code in item-ati-labiomizazkapa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 059727bb2f4248831b4d52b96418d3284b41a6736dcf79994090de5086089a40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182078 Malicious code in goc-gua-vsojfahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9da3a5d4303008715d63404af0f8770a1cc4b5d5793724ded4b278bacfe7bde8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184544 Malicious code in mokok-lukni-huj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c6dc8e09e5dc00feb7c42dc7cd7ae8d5aa0c483d4e8a3cd1bec073ef2779dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184079 Malicious code in mlok-ofe-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84119092b3a8966c43f09ffb7dbf6bbe86ba409a52f94d25f5e88ea79daf69d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182160 Malicious code in gociay-uinga-uugfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9223d80a741f496e4880dd3344fb52015a457bc3498603fd848a58203a89dfd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...