MAL-2025-185225 Malicious code in soniec-kat-faff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c22dd5d3c322c4534bcc3849bc40eabf535ccd234411f05ae2a2c19b10660207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tnadeaxav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2c2a114c5b200cc356c8e268c640d22ee5c5bd25c7e8eabdc30dc31c5397790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tgaav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ef13e89f65ac30f6cc8b9b50e4f0e3cb2194e4243ba5224d1b7fcff01646757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loibac-ubg-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2327f8675f5419c53a777b1c94cfb12b5ceb8c57aea2cc1a41f58ad82a589aee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181948 Malicious code in flights-ilutg-zilsdsdfsgauma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5158f138419d34d6150f130f4a49f191b5af0233e7a0270840f4fac3971c5931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183033 Malicious code in itale-dci-rsut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f59037123ba81021da96e44f6141e4b275f3c9a42d850dcd46dadacc05709677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-fgfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a832ed9f5989ac9ebf09a92688ff51f717a666b43aa7259c907396ddb6b5ff53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182193 Malicious code in gociay-unga-fugiufcgiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d623b8122fcd8f439c7ff440d4925865408fc94bb86bf0b21e364df9b2f83fd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183041 Malicious code in itale-dci-srygfywevgt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a96ac241ea3600eb4b955e09502c23540a91179c939e934a0e5f6aff4c977693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181531 Malicious code in roti24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e542206a59312264f9d5e0e96384b59a673e6de21f23889380866999b563cd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180285 Malicious code in teate-thy-sonic-devo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6810285e660a76d6c0fba1a332375279c9cdbc7ea47ce77f9c912da2fcd0d024 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179641 Malicious code in kisut-afncg-aveudcf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f4fad5ed953d95529bb66e478e592c43c25169869030c534daf6122316eefe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-famavcavnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 470874765584a2698c1217eba462cb7d96ee9c76f16b3144180358957ab7c732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-datdfadsid-doraem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd4fe1a2073db57f8d3fa910e952f34af3479102bac0fcec20f3f6824a0e53f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c5d950a5a3557187bb0d81828abcf926e87d8bde169f915cd0d243476e32402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172757 Malicious code in akuu-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 505ba3d42582882cba3894ff7ac722a7f0383565ebb1645be98dff2c09893f72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9665e5cfc28add3f7bd4290a070828f7f68f4378230294199f37da64fe17c37f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimi-satihu-naib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 924aa87e0ff84c05514ae92d65a1b92be37e9738f807b74bf6122e6ae550f0f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175850 Malicious code in lia-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca5dc5f1ccbe684d95be7b61c2bc41566a25de1ba7fa2e92734e6c536a77cc14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176810 Malicious code in nuilva-darde-gidgodafogf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c8b9023191ae1469763721d4674eb269b2a0c2cd87a70031337aefdb4994f28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...