MAL-2025-181891 Malicious code in avarag-obios-bima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f82dc5cd74545a3a6c0ac3c40f35484b7ac0d074147705154eca4e14da02c3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mokok-lukaunai-haj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d4b1386885d951c9c71cc162631b2d3b70a9ae9c36b0fcd75b2dbc2ad7cf34e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuig-alumabivza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd60aeada8172497162c6544e3c08ade6793c861593eb5b619d250c865bc201c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiudt-acog-efag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15715e6d12da8b731f4ac7a6c19565d9cb1536148d7bfc41366c218f72e8972b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-dfg-diwfzcfeccb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8591e6538e21825b6299cbcca735980a75bb363395a51984ebb3ad7e82196dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-fagiufgafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b660127f1feaa712d039bc5ece4fdf2a36dfe60a609076b2f3d6ec0b1920b3f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kaos-fagiufagugafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a411cc1cbdc5ce703bb199e21513161750d48fa206bb0fed944f0e4a33b84cda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tifuacfivaffacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 591dd64584291580f26664df33b5fe4c55c43142d65c7ca348b2d6e1000e6fb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-gua-visgojfahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d492603c4c3c9ded6c5ede7fdb31e617b772433e8f1713acc474c254d7badb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-nik-hifdagujbagaigafah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbeff5254fde3508aec09a8371cc41ee27070b722269f4a85e95155f0c13c7a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kubusisasidzika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0883ce240189211ba8d107993a21e9553bbd372c5b986ce7a9f1b303bad240cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifush-ugofa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c8e18f38edbba8b29d881ed50330de5f917b458ceff9378ee7ba9cf48ac9e80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kg-tifuacfffacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca9f45399c852826b7a3f6851d55b5ddc7152db2020f2485d13ac865d2e0abc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irhar-aaeasdeadeasdeadeddfaaefea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f2205d9d9e3651ccefe32ec73c3ca940c9ee80cb083bfb98a09a1c89f66b261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-adilonolo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 621efb5c927998b6faee2981f322a35ccda9ea79777341f003ff7777e9ff1352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-fv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4ebb884956b73b3ceb7ee66bc29ad32b1737d30efc29611e724fafc04ffc0cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gisisgo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 935558bf7fcba45b5e0f1ebfd079722900bc309adbc5580ac6495bf463d3991c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avilo-civbuaofoiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a931196ae9d34edc8fcbf02f3f2a81231debfcacc4ec15099a04258de316db3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-don-olila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ada56ddd17ee180057940187ed6c716e7754ab7100f4893a658803556b1f1c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dabami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b21d66b7a3ed83dca521ee51ff2a7d60645117f816a7ca68736549df822f9f93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...