MAL-2025-187655 Malicious code in kappa-debug-lambda-daemon-upsilon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 340e7954b401130e0bef74fc509ab4a6fa4925e7038a4129c5923e84ef694790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dan-ujokulia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5cb22d315a501d03b10e8adbaebb56ad3c4455a69a9e6796866a8af99e11574 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tifuacfivaacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f5c4d31880314a32316fe644bddd2e6e2b4b5bc291168b5c03a29f35db1c410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilisiamo-civufagvuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8306b853f88bfdc9dd224c794f0f2fd828b7bcf317566e8c4b1d49da693f531f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-badadfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6158505cc6bf6fdb67694f822d74ae234619a285cb80036746020314580eaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-icfaff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bef05bff3e2e070d80c5dfe58e23e4307a18ea4d7bf22601ed8856507973b5dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-aig-iyuag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59aecaadd8672e249afcfdbcb499ef3212370d38515688e18bcb2de653bdc293 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-nila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac12fa37a584dfc9c5da2f072287546acac08431d3e657eb261c398e5a554816 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-avg-daiugadajdufij (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d99d4e1d71eddebea66b98c5c96698b940e990c10c38e7e8fcb96e154eb72ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diug-danmifoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a033a62bfb60758a3c0af3efc1b3442d2d0355cdcfe2446debfeca56941be616 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-anamni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f65c8c228f67833417cc06be29eb0008c437b7eab9d510842c516a3ffe23d74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tgacedcav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e37b5ecb542a413c9b8b727f4bca98f634eb0b792f47d6522997f486487b947e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bonia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1792c6032918c71e929242a14ab5423797cc668a94ed27075456676145e9835a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnyagibhghygdfbfdyyhui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775f10b08ab60ca936e17dac7c4faa2ef58d6dcfb396dd5f589e8d7d3394523b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bonijavufiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27e2c7e2fdf2caa9aab473a8df8243ee2c9d93f6cb673ea57bda30575ad89a95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mok-luni-huojakigjim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6449a268459f3b4fc827b8fa30c7601193a5d4b3c46601db1f3fa70ae8dc312b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-akonlki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47ddfd0424592c551ddab661021906d0c6ef233f8da1fe03e4c607f6909f7558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oib-givaisas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0a70dac653f9ce785fef0bcf1810635d173301c3422b360d889c910aa616e00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55aad895ac26fc7cb451d0d81d0571f6fd875126a378df8b6407d41bad70458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-gugoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2381618fb04382cb6b6ac8f5c237372ed847fc0bb1b5fd82466d27c28637d739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...