MAL-2025-184959 Malicious code in sonic-kat-iadagh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 970ce17e3ee4074fdeb15e394625ae5c9208cf2c5ce9f3c867102b4707623093 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181639 Malicious code in astam-ifst-digokmiuaanla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 578292431351e4fd867d5a2d6f948960e6b88b66634e58f04b7fa2d9c1940e23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182445 Malicious code in imodiov-kufni-acumnacffgteafsgredcadfavfehafeabfac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a64d1699c1dba571f6ec8bd7f5df1fe7a4b6aa94cc28d261efa65511096f0578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182793 Malicious code in itale-adci-akni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06a8816ad3d6edf9cb5f17f7b3cab8bb6b2d1996cf47781348ec255eecaf0631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183339 Malicious code in libc-ug-atag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e45fe92289839e2b295d452a65ae4208dd084b33743c0b7ef06b4b8b9c087240 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184773 Malicious code in poliaoz-aiko-aku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efb57a3a2a4e1630bb3fcc1d4a46ddf52d5875953dba7cb6390f6cae304dc3b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-icfaffaud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 406f3429d73e2a5479c0445107392b6f5783a632a154a890780f337205d70ac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-akontolbapakmuuloltrjyfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdad8be8884202dbffa1a53b878be473531d6178a4ea8cee608e9731596dcbb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lfki-ahbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25c28df431879e015135f166dfc4ccd74f285225ddba18ea1ba9aea05ebec3f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kaos-fga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0918062cb52b10b2c85c3ecb368e8ab79a6279c94b248c425b99dde582769b57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80218d43debe038bae4e822a495618aa2fb4ffe67d4c10ed73fdf29524ae6521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kuvu-baiucaufaibvafuiav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9740c35db041af198861d1cf0d5ece11355782b107592e0b410f2e7311bdedf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofki-afahiukugi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d076613c071c6259f232850c7a82d84942ec90c45c9e47b1d9d4d021c71b28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnuygugjkolujlnri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c218d0d32f1c4cbe5080382a40361ea2dc08e5ecd6f7e34f1c47e40c2b43a060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avlo-cobasvov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 106ef3fe8c68cce1f90a9bfb61593399acc310849cd1f121ed05d40dbc9e014e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rsyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3dab0253821d9107c30643975d3ab1d3a6a2141e3754aae290ff45a015a6c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dikouhgoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84bd10dc966774ba0ec879a2d5d71d8eaebeccd4ae5586c0950bb9f9fdb3b395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olioms-nolibmayi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b0da29a8a1075448274f5ea90caccfeb5adbf1f1c16b107916c52bad2300de9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loibac-ubg-tuagiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86dda0d463972891d31ed77b216843f35b4cf9e11c48e2193db9461c05c50925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodija-gifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c953286fcd70a0756dea610a4c9bca92968c65f876272a2d7f937761f4c5e6b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...