MAL-2025-184890 Malicious code in sonic-ijos-asanuoaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 566d94f63c8b668556facea60c9b7825ee0c6d523ec6deb6bf263e472b060b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182387 Malicious code in imodiov-kufi-comoldecoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51aec9b1a89edf1d1cbf8b8a2b815da6add699ee7d3421213e006d0ef38edc3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184950 Malicious code in sonic-kas-fagfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b87a26921ec3a2ab556ee7ddfe66b5b407c1b8f7aeed8eecbfc79c54a4adeebd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182489 Malicious code in imodiov-ofi-cafacevavisvoetmolcabyca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47e862971ab5d3d8e713fe1f5cc76b274f589743d6fe9e5b3d25137f18958a4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183487 Malicious code in lobac-ubib-gafugyfadagab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1695d68fa7fa426a02cb50bf99597bdadcfb56303190f976758b3d9a283b2771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181589 Malicious code in astam-akif-dalik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76039ef50e1de2b77ea7d7962f7db844642e8d131068b55a7bcf35c4424fc5bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-akonlki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47ddfd0424592c551ddab661021906d0c6ef233f8da1fe03e4c607f6909f7558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksdfo-alfdaassdion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f51fb2bdf548f32b43a9b2a2243c928939a44867e768a280811b73b86f2d6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185279 Malicious code in tunis-kjt-gabis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60c6cb75357bef04a2c7734f8921808f0694146cf9095186962d6566e5228b1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutug-adibalonolo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d039f4b737e4b629158dd5b7f57189db9eebf3d2bbafbfe415b14222b18f117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185177 Malicious code in sonic-oig-tmoeaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6843a13ea8be8df8f4c442a48cd4e7706eaede556b23ad18dcc8308463dab687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183880 Malicious code in masv-ilmo-civasam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cab4acfbac3870f70341187d45cddc17523c011172791d49c5d701f49aa96121 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185195 Malicious code in sonic-oihg-mov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f47928018fa75183df95ce01bbc975bd76116f6c00eae15241847b03ea6d87c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183540 Malicious code in lomi-fis-fakugikatajb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6174d0f0c76b92b90dc7e0c320618babfa4dd6d80f23cd46d618810f54ce9898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irhar-aaeasdeadeasdee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81a22daf8ba9e34415b5f0086e2fcea39a798167e67872cf4b13af28953f23ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ots-uyaidoagib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e762cd9d8c7694d79e9970d1697694085059e2df3bb8b57c31be5949b37ca5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kinu-bobacuoafin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46aa8530eab216b5a18144379b809f764e0e84847f8d6e83e4d5a7ff447333c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gisisgo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 935558bf7fcba45b5e0f1ebfd079722900bc309adbc5580ac6495bf463d3991c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ks-ahagafuha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e38efc30314278d212a9d422afd08a0a8afacb71b91965c0d6c25870f2fc19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dabukaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d66c938eed11e0c7c37b2ebcfce030af60a842889f091fb3328cf46005151b1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...