MAL-2025-185134 Malicious code in sonic-kulig-tgacv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d05eaceeff54a24474b1ac0b324b1cdb70c2444eba0a31af22329648b3af0c87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183501 Malicious code in lobac-uibg-abufavigaaute (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da3310245e6cca2c71dcc87b5a8dd2f841748ec97c9e04d235723afb1696d5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183832 Malicious code in masolv-avo-uucav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99567147933ecf3e30cf1291edac5c100d666bf3758e12b15e6c77046e572a59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182617 Malicious code in imugiay-ajvog-daicutaamajak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ef2d5a8108eb638005dc30b155a35f027d24913c586dfe9c8e882ef10cd79a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182652 Malicious code in imugiay-avg-dnif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f67469ddc38e35279a14ce9c9a80bf1c670121270b6dc77f3c121f4237ba83b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183852 Malicious code in masv-ilimo-civufavia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e34fa4126df0dd3235f52a217d7693aa03197886498c77162149b5e3e5d00f80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185057 Malicious code in sonic-kots-jauaab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d06d4723466c1e3bd2ad5df61b463384c37387cb6bb212c53ddc25ff32e72d1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181953 Malicious code in flights-inlutag-idosa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bcadc78bc14254dbd719e8325c15697c0c420fff875055d7bca01dbb869d608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183096 Malicious code in item-ati-kubusiduzika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e235fcb48b41d699c5c135e74b0631de4d64ae1b6d0a3f95333434525d4e70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifit-dabtauzai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f146f9d9b58c878ccd462a8ff4596ae93b48ac14e046474fe45627d807a2e52f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-avcafivaivuvagcd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fc5932a13ddfd41b94cc7000fd3f7c47c265ba7d302c8e2fb9a8831a2c273d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-alnaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ae3eaf7c599cd54d8f6ed569720a0093fe96e8a0e8252836cd007303838de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-klvu-ibaibamuvaavafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f684b879438cc51d3a1fdeb4710691d06f668dc9ea6f9191d7e47178670f475e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knilu-bofavaun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce816dc11a6f65eca315f11d11ea0aee7a6c6b651128141cd218469a1638001e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ks-fudviafyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9419477d9846ff4b3478f9382462018bf0729aa4c45a9e2770d8d7b71f444fa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-afmcauncxab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf2ce54743ad9f0510657689bcf11d6deed02e8d2e03dd6024b9ae4f1841716b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-jga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96aa4ed28a3086fdd1ed7bba3731d110c6da7e2c98a028e42935bbbebb8f2c08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd99ba84341a32284988018a964c0232147a0e6372574bca168e0b947c90896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-ahagafujiha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 845b292470eafc13b0b4b09fc30b37e4bdd96c5beb6974b69ff9f02a14dfec58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diug-dmoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2e762014156d39642fe5a8632d656f419885789ac8d48f0d30970bbfa1aadc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...