MAL-2025-185177 Malicious code in sonic-oig-tmoeaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6843a13ea8be8df8f4c442a48cd4e7706eaede556b23ad18dcc8308463dab687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dinuhsuougoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ee81cc2ad0915005fdb725c56b70159ce3b2089bb82c71793c3872367152d37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-ontcmi-lapiokamakuasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a4f20841a057b8f5bb2a0f7c3e815f594a07a1c3f49538078b4a0ccd387058d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avig-ijimafuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65949ae5000f85c964473d14e8565d5ed85a055fdb82d7e0283afe50e02b047f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-alaka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61154565a7182ddfb120ff66de88ca3b80a2af092e315f3961a3c95b2586bd19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodj-guofi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08be2e03d47d3e5c6a35b90176719721e7b6850eba81e3220239a521267604b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifit-dabai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed4b6d9052bf699b236ff18ab5d569a6e2d2027ff5d7359827ff62c105427e3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liobc-ug-aag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8d1eff92455378f34d0e5e4541bc3992cba06772b6bcc31bf716ea2d60eea57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fus-ugaiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28a9f6d70ab7b3e0c896ff6731a012f86a3fdf2f00ae94dbd5073c4d284b9097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-olubis-balamila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3348c5fb7507609e00456af7f745e6d9984154807f413d2adfa70e3758d2b093 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-danuafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efb552bb2186394012bf86335c402942eb575757974f1d993d1d296d4d0bf2c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kg-tifuacfiffacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e4d12ee18c3ed9742867a6dd78c835088f557ec78932c011bfd89ada8507ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oihg-move (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2c2a87911622f08206ba9746be6e2ab7b14cc9b587f4a9bc08bec6166f9ac74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184183 Malicious code in modaiv-kvu-ibuagofab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04c360923564f139ce84f5497fd0a3c97b2fbbb66cab79a59edf48706c834fdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183875 Malicious code in masv-ilmo-civ (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df44cee5b960d16ac94a8944b81b2c78b09b98abc3197087b4d16f1c189373b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183169 Malicious code in kidt-acvog-uu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a80fb779bfb3cc2788d9a27176916d3c5ac270d010e37db77953a0b53fdcbd9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184622 Malicious code in odasv-knu-bon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1ef4df8c7a985e4775362f559e989f2b519d0e15ef117c35b6d6396a3d52d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183020 Malicious code in itale-dci-rryusyfsuytt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7aff1adbeb9c162035ed3b3a8082a61a702282afdde809cf7032cf9f301692f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184647 Malicious code in odasv-kuu-bof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30983165fdfc30a067b3cfb6627ecf6f126ce799f25121596f771bfb7253dabb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184949 Malicious code in sonic-kas-faga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 839911df5eee7c783c483105bb63bae889a776bb393bcf77c80e808af55216cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...