MAL-2025-185004 Malicious code in sonic-koig-tima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a16c8559a87adb9e8832290de8a284ce1a237c02930748c175c720b9c93dd19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uinga-uufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51882ebf4c438c396f69721f4a514c4e07dd9b7cb0e9de4ffa5fb42209169a43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183026 Malicious code in itale-dci-rsgusytduet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba486481c94ae67075ed34706194b26c35d4116cad8bc7dcdc71bce98a20f482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181736 Malicious code in avangi-holai-inulmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00789d98302d2d8003387a1c40cc86abe489a77fbfb7cade5372515c42f7d8fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182875 Malicious code in itale-adci-ggryuyegfjbsgbajtrnnsuegytefbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d05b0d3bc15faeade43519536762bc3294515da5fbb200063f09464c3974e8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183469 Malicious code in lobac-ubg-afde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69632ec517bbc21680ab1bab6258aaa3f6ec0ff319071dacd3613c9c37700431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181655 Malicious code in astam-ift-dablikabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b04d63256a43868318202cdb8614fba81efd66e9c5a2e4eff95ec05d6b9f5e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184907 Malicious code in sonic-jos-afisigaffafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa4901ada9ac753cc8a7f7e3f914e73886d77f8f4a7800e27eddcbe91fface31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce00ca3bdd1d26cd32f93b19481b2e023ef4ca987668bf1e28a6f5cb7226c7c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/pucuk10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ada5f3345c06278bd6c8e2ad2a4a5407093c1a3e0d6d61210edfa9d8c5c9412d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guntur4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0541166a5413ad20171137628d8a3bf2632a0bf55042b4a3f98fd4dd57a078b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93d81a69640cf493340a1bdfa71f21de8a0502ed44adddaf5fc2eedcf2381927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7db5a2dd5d562550344d403f9714aad78c6996b98fe8625cb2f6b401dde7577b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181523 Malicious code in roti17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6f53f8aacadaef002fcb9f55ea7de96d7c0c6bbca382300063f1c7e1c942441 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181537 Malicious code in roti3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 078ba9eb15dd69a744ed5988b0b5e0ac7b21885c58dd558f3643f70741229ee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 078ba9eb15dd69a744ed5988b0b5e0ac7b21885c58dd558f3643f70741229ee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 933cb6a7f6c58d65c8604641d796690c0ee72e112c8ed26b7a12e430bffdd309 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/pucuk4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae949402a05d92885cf560346a568bd79bd6dd238425ec5a1dc197fbbeb6e03b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/susu2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1f50e585eb20d203a5ec2989c33c26a3e3d838248cb79247c1725ab411df5cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f88034de893bc9831247c92fd60ecd6f80da68ce75da00ad686e4985e80dc62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...