MAL-2025-184937 Malicious code in sonic-kas-ahagafuji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb21f89fa5d9de34dd481ce083356a5718406984696261589c4b540e82ac2615 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183048 Malicious code in itale-dci-sywfsetef (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 582bf997dabe34de522276f541e5fde87d4f56c77bc71d2ba564e063134c2415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183281 Malicious code in kisut-diug-danugamicfuifoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e05912abfc586dd260878d84b41c126694da7d6a4460b59e62f67b7dfd863a7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183290 Malicious code in kiudt-acavog-agicua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfb86906698f88edae9818c3ccae4c0df7a5f82c7cafef6d7e097e7425c5ae78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183381 Malicious code in lobac-ub-jafgf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf002b5501cbb7cb8e8bec2e53e337007fc06679d21ca426ef80df41b687da3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182430 Malicious code in imodiov-kufni-acumnacffgteafsgredcad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9530f9ed3cb274ccd49105ac97f0c2f24b1b8f691179600b5b381de36b067aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-olubis-bai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 586eaa0fe460d4af0048fc8142760d2a321f69f72e546a8eedc0b30095234151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183191 Malicious code in kidt-avog-uvuffacfeaaiafiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 816474611ba66aa7444be626a4a0d5a9ab9794657633ad6feeb3f5895a2b61d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185090 Malicious code in sonic-ks-fudviafyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9419477d9846ff4b3478f9382462018bf0729aa4c45a9e2770d8d7b71f444fa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 229540064d741ec99bf36bbde56e35f3a5648842c384d530ac9514e9a835461b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eac7a71310e665ef029bfd84a557b19d22dd2a05ffc4f9b0c55add351ed33988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30432758b1d484b88d8d61f8109e9450f98d8755a6bbaff4b3d4ddafa9bc52ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ef5eafece7b262363112e158ba153779abe5d85d7cdd99a93b168b6dd978e58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5a6a3ae4a8c03f7610c265d98a4b5a49ca31e64c532a3e0880ad017611820b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efc4d25e46554f51833bbd0528d4923b060c5a48855ba01c3641d2f02c320716 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/batu2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7950792f3fa68ac5ea0589ac1fce4b10697ff5cc35badc6155403173fb09d918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0e10175d639562bb303a4b140cfcf11dd6657ee0442c1665bc728c1a57a03e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 356e8112859049cb5a85dd3032485f2343078e48b24ece76a942837b778aeeb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43fdeacca2af93853b7f809684a7a8c8d00f9d05a035a3fd3e00094fe949c4cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faee3a78333ed73c52d7333f38f7e4d5685d9f5759811b7290d82465f9961dde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...