MAL-2025-184960 Malicious code in sonic-kat-iadavgh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fed76a048ecac2c7dac9ac967f148200b305bb5a2bfaf2029f9baf46afb3e7cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183357 Malicious code in liobc-ug-ayg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2d20724b71a135e1c215834a57d8a36c2e2fc76ebcb2c00098caef513567774 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182785 Malicious code in indea-fotdio-agov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a038ef5280f1baab03b009747ac2decea57881d7b7bbb08f6253ca3c666bd0e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in one-kat-fidulafav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8d7cbb0c415d1ff5ee480d2779b40fb3f9b2c6fca3a57dd0911c4f94da747bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dabualikabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 515ca68d459ef3332387bdf95d25826d11caad6d4359cd253e259bf599a17a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofki-afhugi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942adc79dc004d70587d33929b22c58cde880f20df88deda2c1753b1f2887fbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181775 Malicious code in avangi-olika-tabao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46c507594cf3f7aa66f89ef22f67f61eabeb449b035ad2a26de3dea4c85395ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182101 Malicious code in gocay-guga-visii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fd58c74294120aeb25f0be98c8812dbbc4175806a5da42a3f09760353550641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184982 Malicious code in sonic-kg-tv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c7a4aec9da523313a3a85468c45778ef9d29f837286ce994ba773be80fdaf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182298 Malicious code in imodiov-kfi-cuauscdocavgopmoigbl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3381a65895c92970c2afb34c013645552e67edf4afaba3fc315858ce52be965b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182751 Malicious code in inda-foji-gisagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 706492dddbc0751679f1714b54c9ceef32d31e0f2847ab013490177dccd1ac3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183804 Malicious code in masolv-avlo-cifov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa4910e0913a88c744a4bddf68fb3fb276fb6b62e8c0729a572bcf5266ca8fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 047731eff0d2f7ba46ae40a2ad3750e63f4f0ecad409b8dff97b234e8e9ac005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01b757c718aa3b0dbef2035c79a7239c242bcced07415b7033dd523c7452d9fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 157f29442f148d3b344103b45865c1b2ddbe2fc0b35ef36d667f85ecd3f3619b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181313 Malicious code in @akunsansan0/karedok5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fc159d1d03e8704f2eb85fa2d7bfdaecc9384fbf7fb4169accd8e9ae348244a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/defenmiftaikyy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90110b4cfb6a11264ab8502500cb0a8df72c198c3dcf962e32022aa0655ecc4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-ramjak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2095c16421ce579f4e386ecba1e0e8702d97973855e25cb8028b42b1d83c264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-mibki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bf102e3d7c0cb2523c066d6ee8a3509ce547b487c06cccc5d80be261be63403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-py-nimoj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2600dc769088c18d8a9dbc829112bdfb61e89cec5b54f908a7d73d5c833d3e86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...