MAL-2025-185145 Malicious code in sonic-kuloig-tgvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af44fb55835cb07e0e5094e85d79087ba5baf4266bf6453d544cf8faf1af3e93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181860 Malicious code in avangs-olium-niluva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea15ad30452b9fa1f4f63a757019ccb7231e5a9801a6e1755e98d57e34fded3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185047 Malicious code in sonic-kots-fudvitifyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 811eb04f5c296af8d0775c0287aa1c35e7a9ac2bc0940df219cd502dfa0aefbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gun9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cf7390d614ae3abed79bb62e34e694023ab8cd3c4ff71f6cd442b5018011610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bff30ecf8de84fa98fefe9617c7acc1b424e8c5328ed7551e432ba8c22e61cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/kopi4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cf4c12a5cc0ba291c69a4e65ce92bd753fe2925e8fa1e7dcab44ab1e09ea19f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181361 Malicious code in bahenol94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b5d0bd3a06aa22b146d3191cf8f0e799c2c97d79d1b1fa6caacc8d9918233f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181301 Malicious code in @akunsansan0/karedok30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1414cb1117f85870f3139cf78ae79a2e663dad3903b5200ede9f51c21246aa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8340c7c563d498e3f293603ba793c3250f073cdb7515cf33efbed163fdb1eef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/susu3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2a264ee9b1d2e14f156e15f51cb63b5c64be9f585a8676184698794f7c8a281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181576 Malicious code in teh_manis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a3c5241b89463681edc8f15ceda83f09b2b352326ba37d5a6ea1bf48dba7256 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181560 Malicious code in roti50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ed2a1f9ba89157dc64bc71ad7062eaa94ef9abcf555c71a2a27832cb8de2506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0ccd8e21e64f04ef0fb7a4cb56757c60065fc6b20f77e1df834184b08ab4c77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/jorelat7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05424ec1bfcc8371e06aeb3f04dc8ef69d7190a0341de389f28243d16463a6a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181328 Malicious code in @akunsansan0/pucuk5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a07f7cb1ed18490f212973177629bc15e76b5e9ae9e213e090ad85294a497209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181300 Malicious code in @akunsansan0/karedok3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40db40457836bcbf74fbc6267fa21f0747031b2a5ef36ffa8104f92e66b160bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181448 Malicious code in baso88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0aa786369123d5c8bd731e352eddd9c300d89ee93c3bf56e5d8a09b5d0c7430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e5a7cb3ff5d6fc75f10de7ce0602e4c8caac234555e644707c6c3872186b8eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bc92e86f8dd7930ae960a69013506257a6bd3072b232759020780e19cdc2e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 179ae4571ce61c5e1999e5ab0e2e272516affe550b49f290f6322205bccc9503 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...