MAL-2025-184976 Malicious code in sonic-kg-tifuacfffacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca9f45399c852826b7a3f6851d55b5ddc7152db2020f2485d13ac865d2e0abc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183454 Malicious code in lobac-ubb-jfgauma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa5a9b3b0ccddb2d1b2546a60f3d893a44176ca72ef2bec229b80b18347d4d4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183251 Malicious code in kisut-diufg-danuamicfuifoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 179c5e2d33b4c137b33e454eddf216fcfba37d5f4e616eb0cc0df7c6ac4cfa39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labkpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a50e0f6acbaebad9772f9f3834e3d5bf06bbb98f620f5e61fc908b655fd5b85b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitouko-on-lakoikaunoak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 868ed780f7f895ae3b03c7cd7aaf9727f38d604a8879b0ee83c807fca9c3b9c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mok-luni-huojakiavggjim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 508b238775ba6c12a9726d4ff0c6c22b0e6556bd6ab46b40b8d34598da0a95ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-olia-iai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff714224e7f4e9b3540727c9abb4cb64cba01f5e2945d0c10a7c3cfdab8f3131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutg-od (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e47db5b277a7baf757288c1e3743b38d5e56c72e5b52f72e37fc1c7d0f822b13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvog-dactamaak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14d9736c49b643ec105d6d37674a3d161c3041a49d083debcb59e5111d7e7a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-gugoiapa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c25de26cf95cea48652a10b38407eaa073468b4633c4367edfefb2bba00fb7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ub-baaufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1861e498a62f255fd1705bc66d604c43960c0ae933d39c813fbf737e7d38f628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodioj-agafafba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cad6b6b03cc1db491de8401bb5b3deda8ca22cea9c319a9c4f4186da86f2c2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oliobc-uyg-ugiafdabafiuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 880ffd9ca78fda9a82471f9c58486b5e08ea5b6efdb1c6facda0a420249e7e01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-oliutka-tamaiki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af442c2ff3846a5d9a13343d7ee521f80b0e00653ae2d0b58a5615402064ec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ks-fudviafyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9419477d9846ff4b3478f9382462018bf0729aa4c45a9e2770d8d7b71f444fa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dinuhugoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 846bc35bc6c6c9d1e1c92ee618f568132036f11bc7cfdd4d07e176f657ae852e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dugoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9958076d5ca6fd49450da63ab0c0e014c84edd28c17957d627f08a68d8b28773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-alai-ava0ubu0ku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23e8c24e6157166762c93e9abf8d00423a21f73d462b1c4ff370e3091784b4da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-ja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a00e777f17a13148285f52dada784c5ea4baa150304cf219ef54142d511c9683 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiudt-acog-fag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efd6582792bd4e9b39ccf3bb49ce32f4e25e9214daeae05891188b883087ffa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...