MAL-2025-181807 Malicious code in avangs-olimois-noliadsgnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2839aac3b796997ca2bf361ef9dfcc459d0491f1dedfbe9b89bbb165285ae49f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufi-cmoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cdf9bba538d14aa966721dbb920ccb418f264306e58cff56c1b8cfd2587d00a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-olubis-bai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 586eaa0fe460d4af0048fc8142760d2a321f69f72e546a8eedc0b30095234151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-gioafisasiasloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 494632d0ed5d3b01f3bdecb128428ad7958add48a79bb3392d7a6b2e506f9d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-afibanaiavihid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6958dff562b82fc17a1ea8937511a77d1d150654dd15b151bf04e2a75ff5227e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodj-guofaipa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 367a01b7690b371bc69a5b6d424268a49f63761155f23e70c8ce4041aa5a3f12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-uibg-uha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2029ae0d40a4aef830e2ae70332d848284bc8850f514f36dc8f7ab6243198c59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-gisgimsof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6e1185fa185bdd00bc81dd15963970cb33e2460529f2ec25bdc244bbd2f40ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-if-dabakumiak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ea6754d465d358080ee6db997c9e8736975e2e408cd17c567f1afe62589b1cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-jygwuyfwuyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89cae60553e6ede405d1d43a0891b1c3c66bf5a450534f34f0173be4f3db2ad7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avlo-civsoifaufoiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c6bdb709aacef2fb47a8ac1f8954371794801b657168dbf5c10f1ce650c0def This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-diakavag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 682475149d29ff69e2252eead8f2bcdc841a158958450ff54c71864c2ede0bfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-koifi-cuidcavuag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6db469b8d7f5099d36c605c56f3c598a6be6cd22f1d6deb4701e16e7b3caca29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-diakavyag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dd054bec7c320b56576adb7527a07a9a979f9439c9022c36a065525eff16b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-ifaff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4fa3c46bada083cce71e202a60c9413bbdbdb424b6abfbd4bc2195525aff702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kiunu-bivoycab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a061400c6479097e8768ce18447a2cb6188be5bfe8794aa7ac7d75b10a88ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitakailok-don-olia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ddb9d710d6d39e26798f040d98b399bfd2773233d85e3a0b0f44b61330ddae8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olims-noliadgnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0a9836adef1bad129925b903f1e61668b03e908dc6b991e0b06cbb12d03d26e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-alakanj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d6936b8052325db59c912e24168c88ad2818b302b2420266387acad58d292d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-faga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 839911df5eee7c783c483105bb63bae889a776bb393bcf77c80e808af55216cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...