MAL-2025-182344 Malicious code in imodiov-kofi-cuidcmnoag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 645a72bcb9dd321c50c1bd537407c56ee86df9bc04e8b52cc85f52a93c2e227a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-dfg-diwfzcfecdacb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 852a7788c09cf457a5ff92e47f56fe4bd5db435f073b66aaa68634f97635652c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-daba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e1802b587573b6f642253a25cc6d9fd55d00c4e10503f8f218ae6710a17dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dinuhkouhgoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53ca128cefe38eae4ab6a7a1562fd686c134a74a8ee4871aa42e28b1b1401993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knilu-bofavaunuffn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84f9693e0151ecb46b72968e7b4e9224ef14c860e9fc441687e44361f1f27fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-nofty-gam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7685c146e66fe3395b34a580b1bd3a90b417840de4b543cf8997cadf9e51f9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvog-dacak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60eb697799146d089002fb84f94854468a3626bc557b47afa9961f06cf53dc8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarage-olios-noilagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c375a46eb64142c279dd5ca7322503cba47d0a9ba479c9222ea5cb5f465d1132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociy-ng-gufaci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b60b4a291bb15fe3229d52ddc973bae5a475d527170763ca40d4607e6b03fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fangso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 722ce2a609a67dd48b610d7ce12903ab5ced13be8b550c4c3d91d167bb00fbf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kidt-avog-uvufacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b9c36e78ec992d9adc46a9b697d1683e6b49f87be471e5e2ebb994a30113799 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kuvu-baiufbav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20ba504ef0c66d6c94630fc61006a068072483bd1f529093880476b848316930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-obis-biabla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d245e5bacd434e0274e5b846dc174614b9686d9e18becf0e5d35b513bfd0a2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ks-ahagafuha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e38efc30314278d212a9d422afd08a0a8afacb71b91965c0d6c25870f2fc19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitokik-oni-oladiaps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88bb78545dc9bdeacf5fcc1720cd2b74f230c9beb4ab9fac6d9833ac643f6e97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liobc-ug-afayig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e4004f6fca03bd20d0800f723e644f0c82118dddceacc5c67c286bac659faf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-obios-bim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99f02ce0df9665ebd0af25d8eab6537cd7c6800860b5d5b1d2b274139c69e2d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-zjzakuika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abcf309e4b52cb4ec9513ab77c6cdd449be30f5cb89337c53efa28605386c709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilo-cvaiu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eae5620eb6d3f912780804378e364b84700989eccbbd349ec769af03e8a34e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oy-giosoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad7915ada3b1e55960c6b2646163e620e0a6fb23e19af0e10ea347faf0c83f34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...