MAL-2025-184352 Malicious code in modiov-kihan-afibanaihid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9666e7817b22e999c75fd14cee12ff6a6db574b0e461fbce5ae8a2f181a2a817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-foji-gigaiuasgsfia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bf632c663f24e30b695eef9894a8d0b800d98d30be397f49ecc535e7e715a28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-nofy-gag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74c334674b58efb4b6332a0e378ce60ab755156a3815c2efa5e20978e222523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutag-idobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f5242d905594609e724a02635ddc6807acb6235e372739931852fa8975ca634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-nofy-gaoigaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f57a8dbed1f47ddafff5118d5ab9f19e48e737ab7b563be1a5d28f83b2b12c24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaz-alai-yulbaivuku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3904c486d9c3a96ea1d17a3dbdc59a24ed3dd4d35afe1f810c56124e47e2b9e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuaucdocagl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17d552b55f57fb5eb2aa64d43d813ee1af4b8292ca848d158e1a3911b10848ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-koifi-cuig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26fc1a5a45d5a0d362d8b6e0160913737528bab4d320800dd5d3955a2c46bf18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifus-ugaioi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd0a1408455abcacb4f6c1da9d0fc5e9854ba9ed547b943f90df732f46c3cc11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuidcavuaomnodag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d76a3c13451bb868f4be75606bf02bb0379c97f834ad96ad380cff29c026b4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-agig-iguqakuradidb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 800f812cb8c7c956b479a1fdc3b62de60e9db75ab149f3ac3fd4a35b778e8972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-icfaffaud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 406f3429d73e2a5479c0445107392b6f5783a632a154a890780f337205d70ac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-jygwuywuyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8caff64a8f6f6627af47b658da3b2a0d5e48a8abb1ec42c9d5658048e3c3f09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olims-noliadsdsgnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebb4713b01c79cdde264b26af63a1d04c523827c497b02395299696b6a057509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kubuskiumabika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10062d9d3525f4697a1feef5cb54f6cdc1e9f3c339c11130cfda40ba17228da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kinu-bobacun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a58972fc4107f327c8bd96daf28d40c43f7113804ad58de34e6f6e6b2bf43f32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-ugoofifai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32994b8a22ac756208403a7fdf20fe466d627649798af30250b0c13a9b56b18f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksgsdfo-ahksgasifsdusdn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421810c901015ebdea82d10b419581d6f67d4035c978b82b42d12285b7f5081b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tifuacffav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72c513ac4ba776bef214ae7f8e0e4534e0eeded011842798cf4ccac07affbef9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-avig-iyug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efa74d0b3d9a9a55f1f356c85a51d60844f23a81cb257024dcaba53f9507857d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...