MAL-2025-184890 Malicious code in sonic-ijos-asanuoaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 566d94f63c8b668556facea60c9b7825ee0c6d523ec6deb6bf263e472b060b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-dfg-diwfzcfecdacb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 852a7788c09cf457a5ff92e47f56fe4bd5db435f073b66aaa68634f97635652c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-daba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e1802b587573b6f642253a25cc6d9fd55d00c4e10503f8f218ae6710a17dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-afisigafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f9138d2047268c93caa4fa30b9c227bbd22a3c7553c9d524e5b20ae4d605d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dinuhkouhgoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53ca128cefe38eae4ab6a7a1562fd686c134a74a8ee4871aa42e28b1b1401993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knilu-bofavaunuffn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84f9693e0151ecb46b72968e7b4e9224ef14c860e9fc441687e44361f1f27fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-nofty-gam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7685c146e66fe3395b34a580b1bd3a90b417840de4b543cf8997cadf9e51f9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvog-dacak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60eb697799146d089002fb84f94854468a3626bc557b47afa9961f06cf53dc8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarage-olios-noilagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c375a46eb64142c279dd5ca7322503cba47d0a9ba479c9222ea5cb5f465d1132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociy-ng-gufaci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b60b4a291bb15fe3229d52ddc973bae5a475d527170763ca40d4607e6b03fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-noy-gitsogapo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f5e7e4abaa93bf15bca06857d17ded1ead747ad733b68d361eddac437bfd95d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gisiasvugo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2dd7291241425b1a962c16841c92cd702e35fd7eb3ee1736f0efc00d4daaae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fangso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 722ce2a609a67dd48b610d7ce12903ab5ced13be8b550c4c3d91d167bb00fbf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kidt-avog-uvufacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b9c36e78ec992d9adc46a9b697d1683e6b49f87be471e5e2ebb994a30113799 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodij-agafajaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50386485ce33a74b451a7f64ea42c2e138dbc4d7b9a9f6ef26bb5b2664794cdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-doni-olil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d0b4f855fbba4f261c85b4ff635a5da868c83bd5e692f6bc8c87c26304188d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kuvu-baiufbav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20ba504ef0c66d6c94630fc61006a068072483bd1f529093880476b848316930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-obis-biabla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d245e5bacd434e0274e5b846dc174614b9686d9e18becf0e5d35b513bfd0a2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ks-ahagafuha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e38efc30314278d212a9d422afd08a0a8afacb71b91965c0d6c25870f2fc19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitokik-oni-oladiaps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88bb78545dc9bdeacf5fcc1720cd2b74f230c9beb4ab9fac6d9833ac643f6e97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...