MAL-2025-185130 Malicious code in sonic-kulig-tgacedcuadojxaepav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c043f503efef1b8deca67f95429133269fa09ad85cdcacc32e9036f64afd294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183357 Malicious code in liobc-ug-ayg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2d20724b71a135e1c215834a57d8a36c2e2fc76ebcb2c00098caef513567774 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-ofi-cafacevavisvoemolcabyca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 962607cb45586f2764eeea9e30e1d283b9636cf945d3d9cc828b964090b7f75b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutag-obolavuduli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb1f13f78ca80105c6a02cb00cddc73f18cfcc01ed595ade05fb4fd5dde3f8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufi-cuwimoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b031b412c12d170ce0ac4f9e75f46d9ab3acf9f6473d79e7fc90af6bc4cd410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihon-afbaufcaducxabnyvacgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e9fc45631f87f3a99c6e40f00febbeadb5d772f6d3b43cd1fab7823a1c3537d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodj-guofagogiapa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 329649beb04570a7f12baa7108beddf609e078a94bcf7a53d05e33e2c7ec0434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181939 Malicious code in flights-ilutg-iduhisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0b31c70d46bd76f0e997e469790865ebf9ac8591572d39048e0d42685af3299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oig-mopigafaifc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8123ec45e0dddf712f2cf5ae3474008c16029cfb35fa84d667e4db57243eaea3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avilo-civbusasoifaufoiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21489ac1734aea20a69c69d0ede7a6774b18cede006e7c2ad028c411e61d5b69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olims-noliadsdsgsgnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc8e481f6b8b0934f1c677b2c9d50dd6fbcf5de84911f64064397d45b62531e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuloig-tgvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af44fb55835cb07e0e5094e85d79087ba5baf4266bf6453d544cf8faf1af3e93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gsisofai01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15e8a471912b33b6e4113f390d5ffa2f3bfd3d57e4635eec9141c9a56c1d1247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182055 Malicious code in flights-tuig-alakanjinhrtew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50dd5b64049515622654e93b3c0122a0a572af7434781cd6c22145149104b134 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181897 Malicious code in avarag-obis-balamila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2320b36181400963181123519e77706f30a16fa02e06bff3bc526dfb114f2b2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184562 Malicious code in oc-gua-vsjfhi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5931ef239366ba8ed82f65bca55d2c82f3575c2b2121220ff92f1eed2bdf1177 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183701 Malicious code in manu-oib-gias (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baeb34d3e6d75b10a18e4de89cb0b184162c1a95235f60582d886b4922657b87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183055 Malicious code in item-at-labiagka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dbfa12931d9e3626cd150a2bdb1543474d5a714cfc2c009f9cf10414ee8c129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182303 Malicious code in imodiov-kfi-cuausigbl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a996aa5ebe42ca81447c1dfdecc3ae7451769e788172d87440c5c4273e310b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181741 Malicious code in avangi-ogoa-inubami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6677fd05f1f02aef027597bad7104a21a71120ef425e3b4ac390b5b869355f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...