MAL-2025-185141 Malicious code in sonic-kulig-tgviavue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87f022cfc2afc2867d438ccc02ca526565fc10b8e9f57d7a6059ad12b5c68410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183360 Malicious code in lobac-ub-afdmafdacaatfeu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae396426e8656374b1c6d10f4b3de0f7debadb5a3549bde89dc392043b8748d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185136 Malicious code in sonic-kulig-tgv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0368fdd30c60709df318188d76d5867100094243d7e99d88a5148a4c162d05f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183458 Malicious code in lobac-ubb-jga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96aa4ed28a3086fdd1ed7bba3731d110c6da7e2c98a028e42935bbbebb8f2c08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183421 Malicious code in lobac-ubb-avigiyafagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa426b17fdd1354153f17c4e22c56ee256628a06d468bf0c8914196e9e2ed9b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oc-gua-vsjfahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e62869c92f484eec09e6f5a960f3fb7758eec535bea1acf55475d8b2222d7299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-ugohfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64de33983032eb16a22d7de2fc80304fc170257f69790fddc9931df520657e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyib-gisnuosgisof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c1edd572d0e1275fcd9b7108e6ba700d8e19ad10631faf5997fd721c8cc2e5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fakiugaas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2488cfb32eaf99439ec542214db23fc3c5a36ff4835141633500cce17fdfc48b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-avcafivaivuvagavacd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f387025f08622866d5e7d334b2064e4902cbd4f2021c00e41571444e25268a3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fgfao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23f975b27efc7d6f1959d48dae7b878c892e05ddcf8730d116c5b62b3a18821b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oy-giosoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed7855dd702bdec2e4e6ae5894411aa79c1a842fd4a44ac44b8161942cfa4dd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-nik-hifdagujbagaigafah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbeff5254fde3508aec09a8371cc41ee27070b722269f4a85e95155f0c13c7a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlook-ofe-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f9b5a7dfff6237a039094d2e2adf4b39a2bc4a3c6455d6e0c36b361b6b24230 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ubg-atafuificaafaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6498acc0435d842be6b81d3e5fb34446475797471c45e6dc3eb38c39b250a06c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-fudvitifyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 811eb04f5c296af8d0775c0287aa1c35e7a9ac2bc0940df219cd502dfa0aefbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dn-olikiakibamua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c499d88ecb544b41b65c0ed54429aab2973286d612bf3b2bdf6c12f6f6bb12da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-avg-dnieamnfaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd02585ab2ac04f26a3e0830c20082d2b5363dd59aaef4cdfcf3cbca19426d31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oig-mopigafc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e2b1c040ebb9a953443d98531a63825e597bb324cedfed6b5b7b9e6d6d8d9e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilmo-civasavunaum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78208cd9e77f7371557a2f095c2c9b1c6124d9d6bdbf4057edee0a14ce051ecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...