MAL-2025-187920 Malicious code in mantle-mini-css-extract-plugin-singularitarianism-areology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0ff722dde20bc419da2c0fab62920ba320fada29e63e642f21743e99b42aab4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-oy-gisstsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 179ab42cb1958bae8ef158f6296604ec25261b7ec0bcf8184515e6bf442d3ee3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ub-afdmafdacau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e15a5fa9119530d5be87cd140649cfcced8e4d954232c2b9d362ea8b676ce025 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutg-ildgauma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2756271b6334628803d639e9ff43ec25927fa3d15b082257d1081eda9b3811d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tnaav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c871d46320533cf44f20ca6345eee76fb7ccc7602d3ef75e794d407e5859c1f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksdfo-alfdaassdion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f51fb2bdf548f32b43a9b2a2243c928939a44867e768a280811b73b86f2d6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutag-obolavu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f95ba5fb1f54b53562e7326582fc300e2d30b2b9737acb5e8aa32a73b2d82869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-komfi-ca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9554c772099d717b378fb262f85e1c6f3c3b18838b2a1e79b4f2fb00b3d19221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-diakavgy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c69aeebce57ef1db0c7168526e70c925280626bbeda97de6ef52cb8d2fdd746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-ufavcseqinsdadayaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4836b986058730b15117c5b5ad9f39fef53ff3ede0471755e40e1e98e4344bae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-avg-daiugadajdufij (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d99d4e1d71eddebea66b98c5c96698b940e990c10c38e7e8fcb96e154eb72ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kiunu-bivob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1630dd4503bd45c8b3b826db1ec4e25f92cfe8d0cb4f502c085636432fe2baf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rrusyyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 190ee04c33090a3cc7210a782cce1d6a8850c11e6ef4e0211fa87201e03bacee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihon-afbaufcgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e5a5239abae48e0b1e34104fde4096fe41f9f7f3af5d8a2df7e01587c5624ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kujabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e1696f9dcf62aee1906bf130bd515c412c1e9d29fdaaf13a50baef998abb93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olims-nolisfadf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f85b987e8e0fd1be0f7ce7c39a7c64123d0b6a31da986bf3466257bd1fd5ab5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-avcafivuaviagfavacd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca88ec71734e21fbe6b0d07d2659f957dc9fc0051e34e87b70baeda7c4afdd93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-yg-uthgai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30d5540f0b83deeb125d6796db3e6d0d52c2c6873fdfba379bdae72536f52f9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05ef637e129e6a88cbf90ae50a03727fe724446ae5375e3137045215308ea30c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bonijavufiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27e2c7e2fdf2caa9aab473a8df8243ee2c9d93f6cb673ea57bda30575ad89a95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...