MAL-2025-185196 Malicious code in sonic-oihg-move (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2c2a87911622f08206ba9746be6e2ab7b14cc9b587f4a9bc08bec6166f9ac74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubib-gafunb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed1aad346e15fe331b7fb58d6ecbf0f7470089a66e1d65e91c08f7ecfc2ed8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-avg-ddafgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d0178294d148922a29cd2d674a90023b67d1bdf7a7ab53f62ad56105bbc3476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-zpojozika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87a91ee02dfb78172eadebec4823ebb2d004f2366bd0d1ca6b60f80cc80831f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tifuacfivafav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc53fb2fceaedc62007a2ed69f01d766dd5aeb102ab8bf91ca84f15cb40ec46a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-don-olialobasoina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6dabba80bc224b0c263a8900742caa87ab40eb9093228fabea666a2398b0e1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gisio1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 135c5cc13110f149097b0cc72ec43e9b1cf4eccd76d9c0f02750b77a1c5b5ac1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuwabimal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1e33c0c9e7e7b530d5c04ce3c629bd7a349cb4c161d5763b05653e8991e390 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liobc-ug-agufiaagidug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5fae5c415bd2a68f4bd1155d61bdeef173b8e92d8ffb6b4b21acf7b9f0e23ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-kvu-ibuagoufavauydauacab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a36c8c171a9c82155d81f432783f0b9f60e07fa49cb9e2d6cba3175da0df782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-ali-avnuku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e1cfd751600102e1fe0d6dab63258b878c417c7498f04ff2fdd0e8a93bd74a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unise-kiat-bogatatipda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 499bb27e127f60e7a75cecd65f0cf0004464bd4eb08cefea1d9bcdb126bedc5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifush-ugilkfoabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8d8e271f439812031adbc9e5e0eda6e52907d3fdbe7e9bc29f41989df28bbb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184883 Malicious code in sonic-ijos-afafioh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45738ee330f7eb9b61310ebc626b0dc7a5b12f0af9407cab8692ab3a6f63e8cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184398 Malicious code in modiov-kihon-afbafgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4538113bf3a820fcb303ed3a03e67fdcbbcf8f4b376ab8a9e6fab986f71b15c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184448 Malicious code in modiov-kin-afud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d306c24f85e12a32bba8f972b3a678131011133e3e531d46c06dea0e99a76c30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184741 Malicious code in one-kat-fidlav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bec38a12f2243e7e966a88a318c5bb2e2e48563cccfe5109fe8eefffcc14108d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181937 Malicious code in flights-ilutg-iduhiasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7afbc1a7fcb5549aaaaf3a8f5c09011ce153a234a17d786a83e1cca414d798d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184238 Malicious code in modasv-kuu-bofu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 827b49afb56346681a74703541553cd09e03a1e3b124217d98051bad7686f707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184273 Malicious code in modiov-khan-avcafivd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74b1df911e9451218a2eda33fce673b8786368c82cfd2ce2c81f3ac01852275b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...