MAL-2025-185148 Malicious code in sonic-kuloig-tgviavu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84af51c39cf785f2b5cd232572b5093adf96ceef4c2f288c8c956e8be42e05f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183870 Malicious code in masv-ilmo-cb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ff4ce23199c1c4dc73fcdf6c53631fac94ae693b26976a71f615ea23f31562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182656 Malicious code in imugiay-avg-dudafgacvsigai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 344079ac5b32958f33aa06c802681bb7db93330a36216e182eda392e3c294866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181797 Malicious code in avangs-olika-abar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf7cbf7d2b6d59b1dcb3933549c328dcde5e85265ea40d0941d5a00bdb0a512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184454 Malicious code in modiov-kin-afudsaczub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c5deda5f76856e429d60884636348e273acdbcd8753bd54dac43dc0f945cc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece4cfb5b7f019f9ff65727dfe20df929ae4ec04fb8703a1c9c26decd143a579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d4b0a1b5b7fd0152f065d078d7a699cad4e858c8dcfaba5bb42eda600fe4e7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5606ee6e395396c689c9556c4a8e5d0ad54ac4ab647b76ab5bff2f9edbfec32e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 072fd922e4d4dd49f3d66f95ae3c726918d2c4060dfed6195861579ef715a4eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181326 Malicious code in @akunsansan0/pucuk12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b214b0cc1b7c6e26dd715953103a2c0c0bbe764a343f4e86757ea2b04b8bd77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181563 Malicious code in roti7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 098dbc590c8384efb9b04044855949da91affa33e9fe570dc3562d8996e4d429 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181526 Malicious code in roti2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faee3a78333ed73c52d7333f38f7e4d5685d9f5759811b7290d82465f9961dde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2994e50808305049a3ed4646e9b50d3633e7a856598ada14ed9983d993d858c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26bb9f7b1f905e65b361207481f6bb2a7fe5bd25e336ad2dfca52cd695ec1aa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d2629b933c76aef884e1a71e636e6e7e7a2037a0f8683cafaba6a987583b8bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/jorelat11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d45438deaf189f973e8f7c291ef5d3c87b8d22537bdad1658159ea1a914f24a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8399409604a3df2aec157e32876e213a4db1c86968eb9d465bc9471c1b6538d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b93459be333114b10914381543e8339fef21f93982504492e991af410209b4f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guntur6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8b6c63eaabafd4d1696e5b9f6cf2523596548a56fbf46d0561730ebf6017cb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181310 Malicious code in @akunsansan0/karedok39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 954eb5693ed6fcebb892bcb13a39ac2e1db4b7594e0f2f354e5e065b6f659f8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...