MAL-2025-182006 Malicious code in flights-lutug-adibalonolo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d039f4b737e4b629158dd5b7f57189db9eebf3d2bbafbfe415b14222b18f117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kt-gabisayusgf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73f51b66b84c48cc5ad1d8320f21b1ce6362bcde1a6c3af75f412cabc6648c9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-adinolo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01ed3dc124963ef01056912e76eaea3d55464ed7b342dafc2a59efaae5b08767 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyib-gikois (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d643244aa1f83bc88622683650e580d74f894dc6615cf8fdabb5c803b3ffd678 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodji-gigaiuasgsafofia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd3d4652515063149cfd3b6e35291589decee012232a9472700057d8010cfa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaz-alai-yulbaivuku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3904c486d9c3a96ea1d17a3dbdc59a24ed3dd4d35afe1f810c56124e47e2b9e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuloig-tgviavuexe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae4704499b268df01d82e8e5775ebb598190127f353797d4dcb74fb3757c234c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihoan-afmcautr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c1fe39378db0c48bf6c5470cb84161c8a8d5835e25868b376bd60174d3462bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fangaiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f623daa056305bb38d461108028817cbcaf149825d7f3628267459ea6d8b5a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-ofi-cafacevavisvomolcabyca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa7651249fb9e6168363c16a3bf517ca1eccf999ff0eb540e52c2a37919e41bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-kubdzika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f2152b9aef5427b12a60cb801a28cd8c8c7f7a5b76a55ba8d58ab38dc383eb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kin-afudsacz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bf13d5370cacfa092cc755016ea4f3a9209310fc0bceb6d8af02a93026cf7c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-faverufadix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44ec345c78072d294e5933d7af00ebfc69684a5ba7ef1be67645909fa895fa4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-gua-visgojfahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d492603c4c3c9ded6c5ede7fdb31e617b772433e8f1713acc474c254d7badb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-nik-hifdagujbagaigafah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbeff5254fde3508aec09a8371cc41ee27070b722269f4a85e95155f0c13c7a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lki-haji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b7f3e72a7686c18b0785f8a77d3edbd6f3de94e2136207ddd219904cce148e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobic-gob-gvatfagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5affaddf4649cc66ddfc7c28e170b50d4c8c7adf4967ababcb4dd4aa56ec670d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fis-fakugikatajb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6174d0f0c76b92b90dc7e0c320618babfa4dd6d80f23cd46d618810f54ce9898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-labioza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d45b61fb1b99c6cae867832be66e64e38f11220679f03b74b762937c8337097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kiunu-bivocab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee06181df864699147a3b917d15c5807aba3b29f5cc24bf1cbdffcf20aff1af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...