MAL-2025-184605 Malicious code in odasv-knilu-bofavaunun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03bf4d2991ca6ad4927724b4c282268d998bc3c680d0bc2277463d3be66a740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifush-ugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62da30de824582a340ff03d0932ebdb8c75a4bb5000a385129da6f57a2f42cfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olika-tabar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb3ce23f15fec8534e11411949373e817dc1795739e2f9154d38a224329d8162 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-avcafivaivuvcd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc225dcb5c945b05ef94a2edbc308e01e7abd3d055df0fc78f94a6bc382cc3cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiudt-acavog-agi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 968f90ea9195dd76bdf7421c2fe74a4adaa31227f502d11dcf996cca7424da6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olims-nolu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 274d7755fba61fd245c22f0ac0d5de1e7970845ddf2304314c89c1ebb0bdbd71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutag-obolu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26cc383e1caed113fa9054dfd81fd63e10beed20704dd0fd275e04d6d32a0d1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avilo-civbuv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcb4d08184fcb61ed148875fda4f3ca4c30ba555a3de617fdf9823816b8f07f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuiga-alukza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae78f3017f1d48e680d47a29bb4fb6f3dbbe20742ee0b8aac53189fb838a44f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tgacedcuaav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35d9540b2cf5d3273cda3b8abab0dda28707aa4ce2bdc2330e179728adce16d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociy-ung-ugaudsfis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9513f7cdd195317b0b2b60cd253198e01253895bc7605dfa9d4f4e924b22e5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihon-afbaufcaducxabnygs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b93fb3a6f5820ce95d95b13257c1e23e84b9ecf13eb286060354eab6ad12dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihon-afat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 392384c83b531491c454ece7593ef33a10cc9f5c39f53ccb93d17eac107d64ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rfrtr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65044a716cb24028f7ee25e91a9bd49960270a8f009ca9a2601fd0e35906a9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarage-olios-nol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f825f3f8feed65f8d0a66c801da5995b866c7a3ae4eedadba4df7ff8175ac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dabbamikk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30425507d63b2c919911edd9e4d89b90b6fd17aea4691f53b963b317f6510c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-afibaid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82d232fdc2f09da591db8e3f16fc2348a3cc0d0b647499a4e7fb788214209a43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggryuyegfjbsgbebu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f48865573f9e64826fa7e55a1c09465cc8880f2886200d6fa7a69245fd171afa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labioka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ca25a155dc82b1924fea6246883eb5b4c056feb1b8ab2038734bea3908e55e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggryuyegfjbbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d31f45ac49d9e534b31046452ec911a027fcbc825133ab0ea1fe95f0e81528c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...