MAL-2025-185153 Malicious code in sonic-kuloig-tim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f174f222a42f8b37195fddb3ac983ab6e184fa0e30d1e2b8aa62a6708c19549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137580

Malicious code in gociy-ng-gufaguagaci npm...

MAL-2025-183402 Malicious code in lobac-ubb-afayorg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb11352d602079c3f4e272e7ea2d13acac1dc71557d9a5b66cfbe4b9ae90cb66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184075 Malicious code in mitouko-ontcami-lamokinia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ed1c8927e31ef3150a43cb5994dccf8112b823ce9b5506f532a13f206d394e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181859 Malicious code in avangs-olium-nilua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5021dd9cd99a52afc045324c2a21f31076c4472f4474796508e62e62656296f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181981 Malicious code in flights-lutg-obolavuhiaduli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1799054ab2db9792435aa5fc035a6817ab2a09a834b2e3b3f2dd1578ff1468c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184054 Malicious code in mitokoik-oni-oladinaps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35480eb2926988e512fea0bb455f3c66b6ae05c6fce380ebeb278d48cb411b8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182189 Malicious code in gociay-unga-fugiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 789cac937e076f677b7735a8dc6fda5315492e94308cce9e77158faf65efdc94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184505 Malicious code in moki-nik-hifdagujaah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 564797189d7f53f25016f6235b415b9a5db1581af7ac89affced13ed5092ea79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182295 Malicious code in imodiov-kfi-cuauscdocavgoigbl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbc38f28537061fd5039b7c85c2dcc6055ef5c7e9911cdeb30a0c39e974a16d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184992 Malicious code in sonic-kig-tifuacfivacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68056fa37a0f0e9ad0c75ac017076cd480c7e4d3bc7a35b2b2a3ff22785acb4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183275 Malicious code in kisut-diug-danmifoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a033a62bfb60758a3c0af3efc1b3442d2d0355cdcfe2446debfeca56941be616 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184434 Malicious code in modiov-kin-afbau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b6a6aec576e9ed6b84a41d4c536b4d49f5afd10f48b9fc99b4521c308408a30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185297 Malicious code in tunis-kjt-gmas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e47ce98eef9870e2009e90ce5a0deff8a553d066dde13e4256b7429b7e7f10a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181980 Malicious code in flights-lutg-obolavuhduli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5651e391c8e4a309f493f47edc19af96d671de230b623fd18bae7fb729d188b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182498 Malicious code in imodiov-omfi-cafacevava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a722197a6638173077c8604159d553e1bcb218368815aaee412c61bb2eda83b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182192 Malicious code in gociay-unga-fugiufcagiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fad9d9361497b4323311ac1d1771cb0def3393b7053afebaad76e413f927f053 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183085 Malicious code in item-at-labka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87745aaac0357ce2091df305d10cd849015782459c4c10a20face3f7bf597d12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183255 Malicious code in kisut-diufg-daoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78ec04a5e8aab74924a0441266637ca9e5b807675437eba4d3e1ae74cbb93ba8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183187 Malicious code in kidt-avog-uvufacav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eda547aeaff92ac189120aafe7673f4697af5e8917e9e742b85d5c7b0c08b824 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...