MAL-2025-185151 Malicious code in sonic-kuloig-tgviavuexe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae4704499b268df01d82e8e5775ebb598190127f353797d4dcb74fb3757c234c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183898 Malicious code in masv-ilo-civasum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c546ba4471e998c3243541bcb8c18e5c6859b2bdba80ea07741816bd5ad2e1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184765 Malicious code in one-kiat-ibudavrda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 754492b1e111d36a2e4e8437b6e7da80e0c598fee24dd8be639d8331f32e32ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185134 Malicious code in sonic-kulig-tgacv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d05eaceeff54a24474b1ac0b324b1cdb70c2444eba0a31af22329648b3af0c87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182682 Malicious code in inda-fodj-guofi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08be2e03d47d3e5c6a35b90176719721e7b6850eba81e3220239a521267604b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182363 Malicious code in imodiov-koifi-cuig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26fc1a5a45d5a0d362d8b6e0160913737528bab4d320800dd5d3955a2c46bf18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unise-kiat-boipda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49587bf91d2a4344743e682bbfbceb1b8a355e7ae4c1d373230ee1e277381278 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fangaiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f623daa056305bb38d461108028817cbcaf149825d7f3628267459ea6d8b5a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diug-danuamifoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39af6c4f23e1f3b10ae3f5289105b9697af264f89d03de138efc4b6c2335930e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-avcafivaivuvacd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff302f2f2037bf181e54559dbe7655a5fc32356521d49e238da58eace14fb59f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggmatdnru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 573632d42ed22425fcbb1320544b205f57950153e42e2032d7afac363db066a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifukilsit-daiusikiula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf28f2ee92a5cd7647e24857fc550c123aae16e26e93ece7c812e93109080e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kg-tiffav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01b9307554b544d9058daaf9cc8515a62843981a9a279dbb15e57e6abad638ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodji-gigafofi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a057030f04fecee9c0b89a16ad0a6f3d1042007d1f9383f53b17508b3afa961 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuiga-alukaumabvza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c49fac2cb916ad81a7c51f0922afd20e44899ed9a0d815639ad2fd3f2198b45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggmatondnggnru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fe8461b0744d15d5142e3448f095df0db23bd954f8a9f278c6f68db0b7c2479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggpantekkktoyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5a72d7afd022ce0bae90eb2f2e5fca309e7f9faa60864e43c144a1f51237633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kuvu-baiucaufbav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ce24bc4449226f96359f60a16274c4c58e7635b90d4c611284bb93c6f1e2d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-omfi-cafacevavisvoea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6fd440dd5b06670999e260fe000b83e05c5f9e1498971c921abda151cfe3cd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irher-aeswasdweaddeassaedeaefedeadedefredafafaadde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60204f96f22f6598891bdd615d6d258a4d6e6e06b1e11b4ddea55d6e7add369a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...