MAL-2025-185038 Malicious code in sonic-kos-fusiaffadog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b3b7104f8420cfe2541e7b9cc03b086b35e52e535eadbd967cd57f0634fd9dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184841 Malicious code in poliaoz-alai-ava0nubu0ku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca2e8823f4390d704595e2d34c87c6dfb8778b8188418e67249a41f7be6b4ce8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184563 Malicious code in oc-gua-vsjfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c8dc7b6633a1c34fcc3cdd0dc777af65caabb3193645db070f9efc96620628c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182617 Malicious code in imugiay-ajvog-daicutaamajak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ef2d5a8108eb638005dc30b155a35f027d24913c586dfe9c8e882ef10cd79a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182127 Malicious code in gociay-uga-agid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f7a1a89805db8b885fa4a8438e82a38ea3874991dd76334ad285c013f244a69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183317 Malicious code in libc-ubg-atafuig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9003a6e9ac031dbdde456eb430f09ead4187d1693ce62cd58828b475feca18f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185122 Malicious code in sonic-kulig-tgacdoav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12a71a3a9a74f6709b827d7dfaeef39d8b37b3a9113bc53c8cb382a14472e8da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185192 Malicious code in sonic-oihg-mopigafc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1aced286bc188ec0bfc18d8e9c3df582b3f3516a95e295e015905e813d01dbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181733 Malicious code in avangi-hola-inmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9293db301410cac76adcf7162426dc1658a250b23d728aa052716c95709f28e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-difg-diguota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b31be14540474bfc673070ae1657d30b80558ca27f03c5dfcaf6790b2a6df4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiko-avuhusibvaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6429f3d606080c77b846247494b9d82ba93c225dab94c644f52b4ab9f48d36be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlok-ofe-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84119092b3a8966c43f09ffb7dbf6bbe86ba409a52f94d25f5e88ea79daf69d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unise-kit-bogratipda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 085113e42ba5c1bcd91d3894899524800b5fd412929a0239c3585cf516390129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-jga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96aa4ed28a3086fdd1ed7bba3731d110c6da7e2c98a028e42935bbbebb8f2c08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-avcafivaivuvagcd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fc5932a13ddfd41b94cc7000fd3f7c47c265ba7d302c8e2fb9a8831a2c273d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd99ba84341a32284988018a964c0232147a0e6372574bca168e0b947c90896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitouko-ontcami-lamokinbia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c2f0acd2323d9b27fff1f7f119bd63ba4a0cbb7c0352951240086e166e34cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-klvu-ibaibamuvaavafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f684b879438cc51d3a1fdeb4710691d06f668dc9ea6f9191d7e47178670f475e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diug-dmoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2e762014156d39642fe5a8632d656f419885789ac8d48f0d30970bbfa1aadc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuloig-tgvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af44fb55835cb07e0e5094e85d79087ba5baf4266bf6453d544cf8faf1af3e93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...