MAL-2025-184960 Malicious code in sonic-kat-iadavgh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fed76a048ecac2c7dac9ac967f148200b305bb5a2bfaf2029f9baf46afb3e7cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182298 Malicious code in imodiov-kfi-cuauscdocavgopmoigbl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3381a65895c92970c2afb34c013645552e67edf4afaba3fc315858ce52be965b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183357 Malicious code in liobc-ug-ayg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2d20724b71a135e1c215834a57d8a36c2e2fc76ebcb2c00098caef513567774 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184020 Malicious code in mitoko-on-lakiuoabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a68308160bfcae3bd51b1c51079a228b81167f0a009306f05b54354402a4c27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184982 Malicious code in sonic-kg-tv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c7a4aec9da523313a3a85468c45778ef9d29f837286ce994ba773be80fdaf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182101 Malicious code in gocay-guga-visii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fd58c74294120aeb25f0be98c8812dbbc4175806a5da42a3f09760353550641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184871 Malicious code in sonec-kat-fidugafucfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31895d889007f313fd65a71f9d2f57c8432967a51b39e0b211dcb43808561f6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183804 Malicious code in masolv-avlo-cifov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa4910e0913a88c744a4bddf68fb3fb276fb6b62e8c0729a572bcf5266ca8fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184459 Malicious code in modiov-kiufni-ufavcseqinsdxaodataycrptvaban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74d8879fe182422d79c2aad3584322050860a6d54aa304690bf54dd8d705e09f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181801 Malicious code in avangs-olim-anaumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 557d880c482d1d2429ed98e52d83d546a9744b8b8ff06497a22802d8ec8876f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183917 Malicious code in mitali-dan-ujokulia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5cb22d315a501d03b10e8adbaebb56ad3c4455a69a9e6796866a8af99e11574 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183726 Malicious code in manu-oifads-gsofait01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d038d86c6ece21c54210753a8cdb58c858ecdbd9e44cc9bb6e2f0800c65b1e92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01b757c718aa3b0dbef2035c79a7239c242bcced07415b7033dd523c7452d9fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 047731eff0d2f7ba46ae40a2ad3750e63f4f0ecad409b8dff97b234e8e9ac005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 157f29442f148d3b344103b45865c1b2ddbe2fc0b35ef36d667f85ecd3f3619b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/defenmiftaikyy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90110b4cfb6a11264ab8502500cb0a8df72c198c3dcf962e32022aa0655ecc4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181313 Malicious code in @akunsansan0/karedok5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fc159d1d03e8704f2eb85fa2d7bfdaecc9384fbf7fb4169accd8e9ae348244a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-py-nimoj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2600dc769088c18d8a9dbc829112bdfb61e89cec5b54f908a7d73d5c833d3e86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-gutaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa8fa713f088cc3b663ff0d9c601a4d23f28156feb8c10246dc03f926f865eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-lejfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dfff766b4c2a2cfd5689318f6047bf97e1ade27e1678f06610485266b481c82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...