MAL-2025-184872 Malicious code in sonec-kat-fidulgaafucfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 102ac9ec2e79a1fc4dffbe89bf2d8d591fa916118989beb150e07950bd4b16e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kian-avumangaiab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccfd3c964e1788fbabeddf31cdfcae54097b7392ceb36af96ce87646c8adcefd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-gugoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2381618fb04382cb6b6ac8f5c237372ed847fc0bb1b5fd82466d27c28637d739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kag-tgvb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 248eed230e4efc313942713dd46334818cd9837d4ed782c4be3bdd5dc1694b46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutg-oida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e1712377801d05f77a800d3d4cd1b1357039593718297573da240f66b6e0acb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiko-akuivnaun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 198288d7cfb413f84b5236a23ed3427a6a8bd61bed5df3f6062d7d79d99463b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-fgafav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9a4ee05dc5d114d2ef4f9829e52ae58eb62895672a6efe45c71653474629f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irhar-aaeasdeadeasdeadef (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6939c2e0ca9e67b0035174dacb4af9b1a88a522beffbfa7911d7ac001ef79293 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136567

Malicious code in inda-foji-gias npm...

Malicious code in flights-tuig-alu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a8d8c9bbbd8408956fd4779b212ac44c61e1b4d7a318008fb100fe4641686e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-faveri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29092ec5a62917a41409dd508ccbaea3fef39e4ac3dbfcc23f6e9c5f2ae0bab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufi-cuwabimagovoloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51f707d710bc75b7a1a5eb2286b04dc1bf7446d7cee1d512c789c88e113aaa63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufavcseqinsdxaoycurptvuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bd28b3c45a2dec16188613ba78931b53abdb4e5fd73bf9f0b517f3d0f2880db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-jos-afisigafafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 144290afa69a829cb4ab0bfcb3ff475288a181b2f8baa5ef701f052f0a3d303b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-doni-olialba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5088ebe7b4db673af5242ec6431026f3e69b8bf762f0521a5a6cdc2df0041fc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggmatondanggangtengdydjdyru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf8d359b148483d013f6c4f56bc3dc2c014b7a87ed05c63278c978222b164cba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobic-gob-gvatufagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ad99c325aa7d22b00a4f8f02cdd4677d7304c4148409e13f741d18b90608e09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksgsdfo-ahksgasifsdsdn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccaae5865c5716d094d08784484fcb7cb893fc1794eca28f0309777721461875 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuiga-alukauavza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b73ef69cfc83946a30c8cee86118e494423bfc63ec80ed2e88263165df7a8bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unise-kiat-bogaatipda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42d8e7ecc7706b325d978feca18e5a0b915b2691ea507536175fd0677df8e387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...