MAL-2025-185076 Malicious code in sonic-ks-ahagafujdha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f6a4e093fa8f28201f6e18ba3f1464b671c6ca69c5ca64e8238b403313b0ec3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185222 Malicious code in sonic-ots-uyaioag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4141b1827e9bb5b8c200eb3722a6dabfef8c8758aa7fd53bc23b6104b3a6ddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183171 Malicious code in kidt-aog-ufafiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a123c885c96eab727674b793e29305c4a740092266145c4f6ab132bdb462b94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184487 Malicious code in moki-luni-huojakiavugjim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac08a982db21ec96bbf28280d6554172bec37401417107a3fa630e30c1329440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihon-afbaufcags (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8300b0451a3ccb3e98fca4509598c5bf40d664a3bc0bcb88901847a811a0154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-foji-gigaiuasgsfia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bf632c663f24e30b695eef9894a8d0b800d98d30be397f49ecc535e7e715a28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutg-oidamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aaceef0246ce25a3247650ee27ebd06b34bf3a2786fde076280f127e51d2d0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kulig-tgav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ca74ed0f4f77b67b1246ce51373fc8a7193c051ca0d8bf024f9dc3d85f8f292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-jab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975ceccb1ae753ee364dfbc705ca4d08f8da7d611142720a0f0c650b25596c6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tifuacffav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72c513ac4ba776bef214ae7f8e0e4534e0eeded011842798cf4ccac07affbef9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-uhitaggafadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f2928dd2e441f6e124ac61cd608ce2e044c4fb26cd6b32daea874923a9819e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofeki-akiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beec1e2cabd735ac524a717139bd2699a090ebea49b13f00397149cb53b814ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-kvu-ibuagoufavyauacab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a363b2840910566d5e3498bd6aa7866a1034d985bd1e51889854211319fcec3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ubg-atafuifaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bcf8e0e046816fa25f9082714fcfca93fa1eb9365cb8d3a389c3c8fa2b76491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-afsiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4509f94919490b3f60c76c3079c3d67392d10f1909c41f4333b00ace6ef44dc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fangsuaiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3103d8e57e368528ece53fa4c802c601ab64115571c6c2c8e3fd580e6962fe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-uibg-abufavgte (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8af388dbbce511d6e56599276ac97b766c5510259e99ede38a30547f6d12525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-cocakm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 136f2f349c6e998a3bc5248038384d138ba5a11999bc95c2876c969c864bfac4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacffgteafsgredcadf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 516f537aceec6c23deab6bea2b65ef7cef2529420b1fcf10c1693854850e714d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-nt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cb983febd18968a8597732bf01c611ca293ca69c6a38ec0b596c88fa6ef2550 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...