MAL-2025-183367 Malicious code in lobac-ub-afdmafdu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 180075a6d520af100a1bea60a08b5a06cc2128a97fa0c2da36bb912b3980c8d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185002 Malicious code in sonic-kig-tnadeaxwqcav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0faef3b152e4bb6e15502fa2da4c8c0368ef90810aa355abfb1c5b5d8260098f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-uhitaggaafadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f64ead1f29a7a857fcb190e9618706ca4506f262ebd7f691743bd16710f018fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olios-noliyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de293b08c8401e18dab048ec00d45692620a4018d62288976c0007796427003b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tnadecav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c928f19474be5bbb1a7a3db9ad415791580838b8fe36edfd616cc5df9fa988ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-luni-huojaim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9824316a7d15211102f6327d6474e93f93860067ba369de72ec3dc1c8e9d08f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-don-olika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87fadd548aa021bf1a02103919dcd5ceb067b81889f358ac46da9f40e3244f87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olioms-nolifau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeb6f2c40ed02a07f77d84088323fffe11e8d0238b00be2c68e578d2c094586b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-holai-inmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebed9d999b6c311235403238e8f2dcb25cbfa02fbc74f19b7bc52e0625e5c83f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksdfo-alfdaadio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11955a8b6c1f2286d81b7eaac997b5c42e036454186a26276aa89fdb901b5fc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tifuacfivacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68056fa37a0f0e9ad0c75ac017076cd480c7e4d3bc7a35b2b2a3ff22785acb4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-alaka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61154565a7182ddfb120ff66de88ca3b80a2af092e315f3961a3c95b2586bd19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kg-tifuacfiffacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e4d12ee18c3ed9742867a6dd78c835088f557ec78932c011bfd89ada8507ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dn-olikiakimua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 770c469a13b0c0f8d96241abf67a40bc755482a41267266aa39363acbf2cf6a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifit-dabai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed4b6d9052bf699b236ff18ab5d569a6e2d2027ff5d7359827ff62c105427e3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci- (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1ebe53a80c9704d9270a57862a59ab4d88fc05ac4ec34fa53b6a28b07bd4fb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-nik-huji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60817f8ff7f3e21ef74adb7f4fdf58aa194dac8f7192b280b994be0df8186fac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dn-ol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46e507a5499ce7e2ad9cd3a5fde34c41adadb0dd7d55d659f9d2763f0c4f00bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-fsf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae498453cf0156dfff54a5f8e6dcb971c1d7e80cd1da6b4673a8550f4b7fbea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-obios-bidla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fedb263b734f8b2877105ee7ffb92831f9f33f4aca19247311b334584d96e736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...