MAL-2025-185044 Malicious code in sonic-kots-fudvitifagfyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c434037e1504e747120a01614ecdfb71c8387f3b519122eadfdb4076701c44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185195 Malicious code in sonic-oihg-mov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f47928018fa75183df95ce01bbc975bd76116f6c00eae15241847b03ea6d87c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183302 Malicious code in kiudt-acog-fafiug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969034054167fa7e4f1c26d0bc110998f524ba803545d95413e45cc00a21d30b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifit-dabtauzbdami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84655bdfa4fce4c7da62d1562b3724947bc57f7d107e1ef0154570ec15105f76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fangusaugiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6679ce44d63e30b895e5152b35e676931e6046f5292e9e15cc6c51b7353dc6c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181973 Malicious code in flights-lutag-obolavui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cc080d5e03d7dcb3fc63d724583c1fe339734b4aa3bc0c8053f20d9f673ecd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-komfi-cafefg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbce9e679a2e4300e1dc48fc9f4fba28a029fca7f7a40ceb39bbc13576e85d22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofki-afuhinagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22bcb01acadb22cc6d8fef913bd990eac5686342ce151cc7d09ef6f14114a59f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-on-lakoikauoak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ce3b1043814718b6b2283d845cb16185c26f41c5c9781283f44f2641dc2437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-nou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9073f7af806d515175efdaff87dbdb96f98a181a0cc0692d1d19850c46999366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oib-givakisauois (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dfdbb04ce41b00043ea3927c420c3aa46bc7ea22a3ed15f5e70974c5f01e3dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilisiamo-civufaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0cea89bf4c27df5deffca16a8355bbe064a7e1f3679736782b17e819e619625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kit-bogavoaawfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 529316016365cce39020d0962a12d41ee3036405a1a7b330d6fb70132026fe1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodio-ago (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 023c6224346fadf88269213bc36d3cbf7542eeeee6690cc66c6a69e6f2233e3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutag-obolavui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cc080d5e03d7dcb3fc63d724583c1fe339734b4aa3bc0c8053f20d9f673ecd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tgacedcuadojxaepav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd3358820ec3b3085fa6d69fc9cd4d9126928fa27413b50b0553abe06e8283b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnuygujkjri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 900b724c772f18813d66a98df15491b29e7e31e2fb7f4f32f3f2427d0a8feaef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-afibanid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3860a54bc24374ccbf227817309bfd7daa00c6af7658f1efb6fbfaf992661bd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubg-abe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08418f53fe276a66cf5e9969053f85c533fb8370433749ab18c8c21bcbc1f734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodji-gigafoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6645cdecccb31a7de09a5f318ed73d3482150c9cbe8ae2dc4c0ff26350074343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...