MAL-2025-185158 Malicious code in sonic-kuloig-timesexa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db077e576cc5a1c50f30760215ab499661a486c023148c3f31644c7797596f6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185220 Malicious code in sonic-ots-uyaidoagib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e762cd9d8c7694d79e9970d1697694085059e2df3bb8b57c31be5949b37ca5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oliobc-uyg-ugafabfiuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cd8befb1e7728f7adbf139220d7e39191ae906ca8822aabb95ea8bc8522333e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociy-ung-ugaugadsafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72f9c427af48a4d09563381880fc698aa1a58e0972d188e06120775cc90ba4dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ub-afdmu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df039242bf00b857e00532f538c3c5b4ecd6fd4b13bdbe2637923a1198d30467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-giuosgimsof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 258a73a1755c4c017c6c8511de5b348481cce041293d6f45e6298dd68ad21113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbd9c5061aa2c7a094df9d44f198af6643c3f6b5d139bfa22562b8896bb69fc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-aig-iyucauauggayafg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a80cd6bec00e02a017aedc2477c5ad85aefad2f85423fcd3f1bd3e346ed445e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dinuhsukosuhgoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bbf91af27761f829f8e682e65bb2f448c4a1885ba815bd2ad7acb1c173aacfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oc-gua-vsjfahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e62869c92f484eec09e6f5a960f3fb7758eec535bea1acf55475d8b2222d7299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihon-afbaufcaducxags (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8c716ad011646d708f6b91fcf355f892e7a3cb7b63dc0c7dfff006ad663de11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rfsfrgdrget (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16500d145160e8a515ad7d3a465bcaf4fca3bca1eac2d19ce78adc2a3ae688c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutag-idoabhao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f09d3abb2d2a39359dc8bd0dcac8d4b5ab7dc2ba5792d352911cd3e32d6596d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiko-aku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efb57a3a2a4e1630bb3fcc1d4a46ddf52d5875953dba7cb6390f6cae304dc3b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-avigiyafacbagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b2945a0c653d7b90e53c37fd546e2cad3cb29a43aeddb97bdc5b8c366a82699 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuwabimagl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a6e77349c4994eba040c29a1543c6ab52b03e9df17883e1ae20d9dd4497d9e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-avig-iayafcf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cf4e85ce315a020994cb46349632bb486e19edf3f66dc8d7157848df78f4661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilisiamo-ciuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b56724cc51ee708ff7f43c9733ec2657b0e429568ba455662d27df5220f12970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksgsdfo-alaon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 986924ecf45b25cba7211fbdc1933a996ff7c05fe04e19d330a5010460a95d43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irhar-aaedde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4953703c6102ff493b3aea0c1e569395ded7238ffa6e424cc48d415d83e0b900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...