MAL-2025-185189 Malicious code in sonic-oihg-mopifc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15aa163a62b502905eaca5f12c98831e7ac399b48292cdc9ae2f9fd500a3e1bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182925 Malicious code in itale-adci-hykaulaygg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8ce7a4a863926396a7fc78a11d5d4ef2a15db676ba9429701d7b48a917ceb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184146 Malicious code in mlokok-lofki-afuhiubabanagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c0a6be76cda215adf7690b144708ac91da4bf9c11c3b56aa447b91d981a398b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181697 Malicious code in astam-ifut-dabua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d8424175efbdbd473976c2f8d40e3eef19e45e1cc6fb0dba339e86dcdc3bec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181932 Malicious code in flights-ilutag-zilsdsdfsgauma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee722dd2c06d347a898820ddf689bc23d19751e208ebd9c6e5f8422242ccc9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184878 Malicious code in sonic-ijos-afafioah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fad0db5d320e176329cd15727176e57938087a605365c21efaca1fb49485c89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182688 Malicious code in inda-fodja-gifaisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0e0cfc0dca069e5f9fbd107b818c4e0cbe7692084118ea0a5867570f92b18bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182870 Malicious code in itale-adci-ggryuyegfjbsgbajtrefbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2394e7faf400ee3b8f270cc9ec7d59e442bd656620ba9bd76a98aedb3eb68de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181964 Malicious code in flights-lutag-iobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91b216aa9f21fe1c85acbabc5082dfe4705f40c0227a73c4aa7fb5d038ae99fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fusiaffadog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b3b7104f8420cfe2541e7b9cc03b086b35e52e535eadbd967cd57f0634fd9dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8695ee085142fd2f17696c92c5d8663feb583f30f71becd4c5cdf92e37800dc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58f37d7acd9c51030713ab601cd0a9b42c4a1988c3b8760988c8975be05db29a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/susu2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1f50e585eb20d203a5ec2989c33c26a3e3d838248cb79247c1725ab411df5cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gun6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 391a300a0704dc5a338d5a2acc57bfbb3910153b95cc00161c836faeee07d4f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kopi2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 244f0211d1c0171e18335597cb2db6e3620737d134d9c4588c27a77343d4f645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4081586b459393561fe22e1639a81652ad5f9d090bbe7efb31e27ad6070d6a4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 371e1de7ffd5b0428847609c79c73c6564c76cc77dec052be1154ee0e45d3fbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40fa99661cef77900a53cec9544cd3cd99c9a978c60aecc45cec814557169065 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gun7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8305bc0e73c6787dc30dc9ab6a8361592cdef0ce30f90dd075708255d60d94bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/jorelat19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9559a679045b7e6ca17a5857bac9b1156977d0396ba3e54a9c176deae1409427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...