MAL-2025-184913 Malicious code in sonic-kag-tgvcb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b26d97015ba048546be0e9b34c8fd7d24f5fcf73c6c269ad507f13d5b52f638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182455 Malicious code in imodiov-kufni-coc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 231e70af6270496b10470f3c372cf0d86cb52e5626a1a5093d62e59ace831751 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182619 Malicious code in imugiay-ajvog-daicutafamajauak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5acd829e75e901b6f8f922b904ad40548b3ca1db3099fb73ee329d28e46f4037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183069 Malicious code in item-at-labieagyeyka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45061620d0ce187e2053e10d17ac0acdf1cf31d36ac43b5f9a8442ddb47022dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183047 Malicious code in itale-dci-systrt4tf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c4357db147e0cf23d40e4e42e112fadb8c41b0528c23a5df30915ad082c80b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185047 Malicious code in sonic-kots-fudvitifyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 811eb04f5c296af8d0775c0287aa1c35e7a9ac2bc0940df219cd502dfa0aefbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181899 Malicious code in avarag-obis-balmila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c1285e03949a00565f1b084593ff126808a620eff8b9895f6afacc7420c9c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184308 Malicious code in modiov-kifni-ufavcseqinsdxaoycurpuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30c65c4762a6927dbdeaa7398b8d72fccf381c3dab3f11354938e23a61fcf161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181655 Malicious code in astam-ift-dablikabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b04d63256a43868318202cdb8614fba81efd66e9c5a2e4eff95ec05d6b9f5e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181787 Malicious code in avangi-oliutka-taba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5914699eeaeebe8aa196c1e3ea3330b560669100eb5e2bb8a19a11410a6e2a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183313 Malicious code in libc-ubg-atafuifaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bcf8e0e046816fa25f9082714fcfca93fa1eb9365cb8d3a389c3c8fa2b76491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184374 Malicious code in modiov-kihan-avcafigaacd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cefbd04cf9baa6d5a0bea10a1411d75709510a3b683f6d9945249e86a7a8ad1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184116 Malicious code in mlokok-lofeaki-akiagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0d053fb03abf4a1d8c319d69e1a173f44f62085cec8272bb8e2c1d94870b6ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183968 Malicious code in mitk-oni-oladiaps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33cedc3d07f75d3778757217f59484e4deeb5b7331928505555ebea31d1addfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182893 Malicious code in itale-adci-gnuygugjkujnri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98be6827f8ff60d32afc362b8f26b005fa1b95f3f8a5f58256a7ee82dab32355 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182684 Malicious code in inda-fodja-g (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d497107c4e4a0ed32d4bc6fee44d2ada243a1951810350f8dbf2f7faf2f285b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae1eed41cb03b509460a241c9e5c3b40e7f1b9178aa86af9cbb5150163997952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/jorelat8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1814dbbe0088cd35f2150d8086c5b3b6ccdda5d24a4ca109377e0bfd69484f70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e5c94bd91327f8ea51df74b18c10ecb0240995f7856dbab481e8fb93daa35a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 229540064d741ec99bf36bbde56e35f3a5648842c384d530ac9514e9a835461b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...