MAL-2025-183072 Malicious code in item-at-labieagyyka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73525a6c2609d60e92e585449afe4f2f3ef6aea8ea935d2fd8e4b82e596ad4f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avig-ijimamfaugf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e99dd79560f4636e74bdcd4241303b1585b415da5e6665f8e9c1d261495d58e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fus-ugaiaubfolfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 002f893549d8e85f2f444ee9443992fc094ff4543de958e72183b419a170cfca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kt-gahvfaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea75dc41825423bc5155475bc6a3498a50d19fb4da5da6639d46d057ffe04d00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-alaka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61154565a7182ddfb120ff66de88ca3b80a2af092e315f3961a3c95b2586bd19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kg-tifuacfiffacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e4d12ee18c3ed9742867a6dd78c835088f557ec78932c011bfd89ada8507ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-nik-huji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60817f8ff7f3e21ef74adb7f4fdf58aa194dac8f7192b280b994be0df8186fac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-uibg-uhaufaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8396ac1c021208b2f51c8aa1a0ba11af48bb8a68fe25ea7387e955f814988afd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodioj-agajonaifau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13212b0966eae56d1dced9e6df7511a170b9ebb4b83ffaa930bec0149afa97a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihon-af (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a79234e9636a650f0394f5db2e56b57a4098afda23f5f016ee92817f1c05ce78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnuygukjri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f260bab9e71306fa794dc6064823a30b055b1c48f6f6c9c78b70d4e6663c756d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-oy-gisostsio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 245800ff90c2f22b0478cdd48b2c7e0899423a67d912520bddc6ada569a23113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-srfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec56681fdd4d43d646481b0fa63418ed08c0684e6c620ebb1c13055cfdf2b543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-koig-timexa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e75de2b7f8dd962910f449e5918ba9947f6d7e8c42fcb1ba9b3e0f00593c276a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-ugaoyui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc6e2ad948665d1cb006fbf4ae6b4793637657f65325bd937583bd9b47dd5e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociy-ung-ugauadsafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 434aa107150a97d293a5d959f5c2aa4bcb3864b817e73dad0e7da5e650f480e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutg-idulaisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffcbf58c2e44ed2007382e48ee9a69fe1b38e2feb0891a7a6a8ccb7810b3d473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyib-gisnoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605226e63b084c43a784bfc3c969698003dc3d29afa04502a921b876b9e5f06e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kidt-aog-uvuifaafiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8532fb062682efd4c13a02578c52f3eff559c78c7391a5297b0a73139b39a20d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kin-afbaufcaducxacags (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eea7649776ab28ab7763b91a79915c95bd48417403ffcf0dfb410edeea328d05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...