MAL-2025-185056 Malicious code in sonic-kots-jab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975ceccb1ae753ee364dfbc705ca4d08f8da7d611142720a0f0c650b25596c6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183610 Malicious code in lomi-ifush-ugio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a824e694bc52478b80a1af088300ad16a89d337f6783551edf6239cd1f57e63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184115 Malicious code in mlokok-lofeaki-aki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d67e223c5617163ea4709c518ba42d6b99413519a3ab0dfa100d67ef556c381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181731 Malicious code in astam-ifut-duoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 696e404c1daf42ca7ea9195cf0636ecd76c5da3043dabba1fc7558e1e4965a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183207 Malicious code in kisut-dfg-diwfzcfecdavgecab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40ef1b07add413255afcdb12a4d441e64fa8e8c6a5f4ea30b8e299b2d35c9131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183320 Malicious code in libc-ug-ag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a9136dc2b0c9da3cf142015b3163abdbfa4eacf5584fb1f3191de2f1b5b2579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182441 Malicious code in imodiov-kufni-acumnacffgteafsgredcadfacvfehxafea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8288e02475f9171a39ac05a5f52f962cd1c0feb09df654d6db2eef0181539c12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kian-avumanb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf77c3b213d8dccf9ff9277aeb047c8c78be2172a6ed4cc9c73d2b624a683765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irhar-aaeasdeadeasdeadedf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4d15729b5e44715df37bd9d68987690a3e4c80b2a6698ef27ef580566e888bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuausgbl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ec0feed490438c033026ad8c258e21bd71743e144a9ca96f7bf4b2ba866cfd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olobc-uyg-ugofahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c89d89eb303c3d0b69c47c4760df9ac6ba33f27dbdd7ab0bb6a832fceea24f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kuvu-baiucaufaibfiav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c377da811874e2c41815946b3525e877724c140d4266929be5b7b390bd25c70d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-d (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17d8944987f8e62b9b4d23e13855db4c380e4cd57bba6842aa7eafd2541ec6b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184460 Malicious code in modiov-kiufni-ufavcseqinsdxaodataycrptvmaduuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edb423dc6fc06a261e004067c4b3d48ebe7235bcd4f093153c5381dc2d4d7d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184171 Malicious code in modaiv-kvu-ibai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b604e6cb259913394a553e1875ab1046dccc2e3d2aafdbafa4b2a553e307c6e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182159 Malicious code in gociay-uinga-uugaucfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eefda5b5e3085109b39b341e1c479fa58c4b6a0920e488bfa15694b822e00074 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181892 Malicious code in avarag-obios-bimaaogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fa859dba0320e214b64becb496c2d76474138c84ea0c45735c72f5765159418 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185092 Malicious code in sonic-ks-fudvitafyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 255a32e90533a303df36326583252dd1a00c5aea3e02b9c8e12ed9585f7f3ecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183600 Malicious code in lomi-ifus-ugofalifuafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ba7da030fa77f34e8154b5f80a83d2de0039b8c016e53a7a8ac83708f084dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece4cfb5b7f019f9ff65727dfe20df929ae4ec04fb8703a1c9c26decd143a579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...