MAL-2025-185033 Malicious code in sonic-kos-fusfg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3095d8f97d9c55f1edf8492228c9b787088e2ef26ef18be6b65ed20601b2a6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184465 Malicious code in mok-luni-hujim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ae9488d8f4e99475838f2bada5a0326b6a717eafe83124fa6919e1308cb093 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182010 Malicious code in flights-lutug-oiad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fbb6f95792bc674d1c22a91d6c6457b0287e5d78b6988facfcd98a64c00ea36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181816 Malicious code in avangs-olims-noliadsdsgsgnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc8e481f6b8b0934f1c677b2c9d50dd6fbcf5de84911f64064397d45b62531e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184640 Malicious code in odasv-knu-bonijavuficuavaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f216b73fac6cd82d55b96cd17c8076c1b6851b772fce351dd58325b20937cadc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30432758b1d484b88d8d61f8109e9450f98d8755a6bbaff4b3d4ddafa9bc52ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efc4d25e46554f51833bbd0528d4923b060c5a48855ba01c3641d2f02c320716 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/batu9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e85d16f483079e6e5829226e795ee85efc7632b615268c487b431d3adcf6f539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54021b1cb3e86b952d531fdf525a33e1c85374f3c2d53d4eaf5188c64a36cd5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30e5ee2f584db332b8a6fdbc26c70609814e7948171f8a80f340636581ac1b58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/jorelat8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1814dbbe0088cd35f2150d8086c5b3b6ccdda5d24a4ca109377e0bfd69484f70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be2649424bfb044d8386f79e587c5bd59388abe908e4aaff01044bfba9efbf12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/batu2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7950792f3fa68ac5ea0589ac1fce4b10697ff5cc35badc6155403173fb09d918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 229540064d741ec99bf36bbde56e35f3a5648842c384d530ac9514e9a835461b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181464 Malicious code in cewe11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b93459be333114b10914381543e8339fef21f93982504492e991af410209b4f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181568 Malicious code in tea_gunfinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e39061b5c4bd19ce1c4484339c02362e1c72a8e487bd6902d4403694902843e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181488 Malicious code in cewe6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e925b928e8cc2ebabbc5316670e9ee5efaf8b82a10e719b6ef8c7f389ef7791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181416 Malicious code in baso58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5096d4b84d33c9e3a0f0196b931ef3ce3c4e70f376d450ba3fc5fe4a327bc52d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181240 Malicious code in @akunsansan0/biru51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1c07af633e0c3899745560e15fbce5ba8bfcc53abc46bc611bc55bce07cf720 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181209 Malicious code in @akunsansan0/biru23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ba457ad437e8200e6489fcf2e87dc0e4399038c98278c6e9209a27550fc8343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...