MAL-2025-185141 Malicious code in sonic-kulig-tgviavue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87f022cfc2afc2867d438ccc02ca526565fc10b8e9f57d7a6059ad12b5c68410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182915 Malicious code in itale-adci-gnyagibhygyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 777aa9ea6419ebe9c15f84081eca764d6bebab54e4b3339761462d208535b8f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181589 Malicious code in astam-akif-dalik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76039ef50e1de2b77ea7d7962f7db844642e8d131068b55a7bcf35c4424fc5bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181879 Malicious code in avangs-olium-notsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f409f7896799d8807cf3f4bea8f8c60e79e0d194ea5a6055f8aa1856b67facab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184643 Malicious code in odasv-knu-bonijavv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13e909217887aac6e3041f13f1a27e7b3c3668c7ae434574757e7f5a5f35a73d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184474 Malicious code in moki-lni-hujim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a64ba899c57cb3a963fb1a3f7f5a91836888265baa8d1eea334e6dd624747d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184539 Malicious code in mokok-lukaunai-hunanakuaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38be402fdc0be8cfad898e06afc4154026429596f2a4bf78566c599fe664165e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184750 Malicious code in one-kat-ibudafrfdaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2613d53a01871fbc317cbbbf7defe01a4fd7666407b91e7884d917a2ab57f3a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183144 Malicious code in item-atim-kubusui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b6ef5c8ca17d14ec9ce8f81cb76b35b6e4d4849a2010b80421dc275572b264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitalaik-don-olikaisima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d41ce8b0a5939a5b68df8a6456880c3545ebf4518843290a905f8a28c68b276a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutg-od (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e47db5b277a7baf757288c1e3743b38d5e56c72e5b52f72e37fc1c7d0f822b13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-avig-iayafucamrfuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc305fb5369263e0f387f1bec9f859b87faf548e70ede2d4b44f1060da288d91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-avcafivad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84a39e282852ce7e1528ecbc17b9f2430bd68b98f173e1141742bc92b3117b89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-gioafisoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e948acc55ead6175abd00658e2d85ccc65c79f1940193cbcb0069b08771f731e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bonijavfvf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 655a8986cf16e65f120c120f04e7dea3eb2b6787035b561919e84b48687ec6bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kubusisasidzika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0883ce240189211ba8d107993a21e9553bbd372c5b986ce7a9f1b303bad240cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kg-tifuacfffacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca9f45399c852826b7a3f6851d55b5ddc7152db2020f2485d13ac865d2e0abc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gisisgo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 935558bf7fcba45b5e0f1ebfd079722900bc309adbc5580ac6495bf463d3991c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rshafyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0bde64b0746538488406e5d473dcea29b11c3cb6d317a47ffb7e48974a67f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bonijavuficvaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7aaf0697d2584cf37b686e1d0e0a2fe564f79758c494df6b6638ddf362fdd8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...