MAL-2025-183880 Malicious code in masv-ilmo-civasam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cab4acfbac3870f70341187d45cddc17523c011172791d49c5d701f49aa96121 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilmo-civufavsaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f72844104405ce29ff1b20e69348a5d35c13960a9e39af4591d38c66f3242f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-oy-gisostsiapo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e715e59c8b5977c7513fef29f45acf6f70cab04196e35dbb97be88ace360b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufavcseqinsdxaoycurptvmaduban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ec866ee2460c7f8f4e1af899b9ebd5fc327b2176f0ba071110c415172ffdd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-uhitaggaafadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f64ead1f29a7a857fcb190e9618706ca4506f262ebd7f691743bd16710f018fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-jos-afafiofiah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d04ba84020d9dfc8509e469969615a44d0136b85bf9318cd208335202bbf0ca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dabtadami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c62a3c74a1444d682521a1f61c45aafe12052e8961a3b3d1c4a013630f092b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvog-dnieamfnugpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3637c4e46d4c374c0cc7aecc344a8bb57e219a8b36741dd8cac2d9a8251d629c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuidcng (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 490d567b7336db015e52efca7cc070afcfa5c9c464ed428bced9de666e4884e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olobc-uyg-ugoofifaduahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25336c1c188efad011f084e319b85211ec45c7cb7931478518cde7c44f9ebc3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksd-al (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b473c8f7e3fac0d1b25e8f4d0266d6e738f50386e5b95f0277f79847ad2067e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-alai-avabuku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c76beb6ff6361d2a8141a19a2881ecb504bdc8a9ed5a13b85fb050b2e1ba99cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ijos-asanuoaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 566d94f63c8b668556facea60c9b7825ee0c6d523ec6deb6bf263e472b060b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-ginuosgimsof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8bac6de78cc5e2d25bb0e42062e7abfdc5a070726981c0ae5614b38f407ade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-cocak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59073bb3f419d2627e4367fc94741f4505c398412e1675e19adbae137e7c74d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnuygujkjri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 900b724c772f18813d66a98df15491b29e7e31e2fb7f4f32f3f2427d0a8feaef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutg-obolavduli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07d9e8a097e061d66f8467d6b1daf0ce9b661ae54145f873b1f17fe24ef61540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutug-oikad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ade243137b8eb7b4c470c15d0074a18b47a6ec80f167241ad335af228c0351e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-agig-iguqakraidb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc362e6dc4c4a2906bcb51394ec9630bcc118bd39e7c1ee2c24c1492beeca67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dinuhkosuhgoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4681022783bc3962752a4e089b2c879e733b1977a0e1bbc083ee49de35e8768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...