MAL-2025-185107 Malicious code in sonic-kuig-tgacedcuadojxaav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ecd762052c83b2a90d8745a329c06aabe226b57af566b57813ad3fee933065 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in asta-alikif-dakilam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c95fadb778c69a62261edab22d317781495743f67a37080052b636108b466ff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tgacedcuadojxaav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ecd762052c83b2a90d8745a329c06aabe226b57af566b57813ad3fee933065 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-ahagafuji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb21f89fa5d9de34dd481ce083356a5718406984696261589c4b540e82ac2615 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184008 Malicious code in mitoko-on-laki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc332f088f6dc01723d5217cb613db3101b0316bc35a186bee56bbc97fd02f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185068 Malicious code in sonic-kots-uyaidoagibajb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43c68c5af1d045eb717b17918fae36cc8c2502237e0ddd9a7f037925477fb988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avlo-cov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07211e083ea0fae208cb99c6313b760d9d02f00008518212b4e0fd4e484da6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184345 Malicious code in modiov-kifuni-ufbaceuiacfovadfhjodmux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1bf1c392b7d6f1b99604f37791fccdb16096401e4dee04a731928a478bbf8fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181878 Malicious code in avangs-olium-noti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde0f92653f32a9665859f81366c641dabd589620cd3746f09ca6e43856dbf73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-ontcmi-lapiokasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e56f083d7d097f8b3fcabfb8bcd140e401bb7bf34eea8c0278483fa63fdd8a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-ugoofifi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5889bd28b256c558f4b9ff1280bc8e2f4f7c47329dd99765c31447422a74b151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-on-lakok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ede95fa3916d8b19e682be7e20dd67b64c765e5b0ac91069263976a2dd17105 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unise-kit-bograttipda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8992c24471b013c309218af3a24dda0509345d27707497ca3d7302c37e89045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diug-damifoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4301501dff2d7b2c475494d391970a0a11802f200ac2462b371cd44e056ff18b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dabbamikumiak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bc69f9a615f06a1736629eff2fc029002b3eb2a54e46cbc06ac8f471c33db0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182510 Malicious code in imodiov-omfi-cafacevavisvoetfamolcabyca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3353460c96e810a71e89fecb705699e7f7f068ba3f41a504885e6c35a444d358 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184613 Malicious code in odasv-knu-bobacon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3592e0d1ff2dd2a7528acd95c5d2d35a70e221a6684afe9704ebf9e7f30b8159 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184760 Malicious code in one-kiat-ibuarda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c1ae965aa32fd400d9c1232f241b08a8f8b444feae42b8f4872c9961542de5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggmatodnru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 840d91dbac328559284f6498641d488f142b63a73b5581cbe6c51cef84875584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-olia-itaniabu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90cf6242aa9188c361d39bd7a11c9e8069c652de8bc25e3c6244f867263e4915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...