MAL-2025-190308 Malicious code in weywot-wezen-bootes-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95af838a5409ad46c803f49911e5142c4505a584392775561fc0e5b1eb266f01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in genomics-biohacking-xanadu-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db31ffe47d54cdaa5a7c3fc25c8f9613c3d1667e57a7e9a8b85bfbccb19d791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnuygurgjkollujlnrti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a08f6a18e817394f80cfbc9139ca2e128f2d76b50a2459765ae4e1c2b63fed50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-on-lakinuaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb08ce36e6290159fe8dbc300634fe139632ec7ecfc0ab362ee7f3d77dcb652 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitalukailok-don-olikoaisima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa84928515bb1839585a73d9c7fed9cc7e82b4656af9d28504571037b106344e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-uga-viguai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 351d5fe1e7b8d21f66d8c2e9aafc40baebf223fd2ea16600efab09998cc92e95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avg-daiugjij (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da5c3cc014959b901783595f884d96e910548173231e8260ef585977d34aca89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihoan-afmcauxbtr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 998a00c89cad238d46173b96ee404c4b717188dcdc99fc6c3b4d9007b2492803 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-avigyagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a61903d7e2715b95d9139648a60f9f8c6e7dbc990e773635ce6942fc2a2a72f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-ailo-civbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de205376b72ca87d44fc471dfeba335ad393e1051c8d78afed1ee36b117b6114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7715940793b2643d25228b1a964dad995ba3eb7b6ec44ca2896e06b0e4acf427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-kvu-ibuagoufacab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d3495b80b43e68f38bb7df3cfae7172378ca21fe328e951dab43b3716e0dec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lfki-afuhiugababanagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93c628d76da304ebe30bb9dd8ec1d0b24c2b75ff70e2a158f7da868be2708105 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-avg-dudafgoacvigai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cde52d37a8fc94cdb70e1a373df8f10c0db86fb91d06fbb14b3fe0af8d328dde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bonij (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38e2d522814157fcf03b92e28a8ce9bc9da548ad69619fead07d51e6c33df3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-fehjidfy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b733068c576547fd4a33d708f3815d7ee718e319ad403d45a19de928c7a10ae1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gggbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32111508e1795c7bad7c21bb710c7161d7d5e07291af62984555c76bb4c8b75a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggryygbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7821c3d2ed17b7b7532216a49ef429b80fef471444aa3197f0a4b90e010c8b96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dakaknuioba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d1659c696886195e18233769ae5b86a464467fcaf904c28066051e9710bd4f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oy-gioisioasloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4156a084b34fd4f478171e916ed03ca6973ccca5fc35089a2469ba55a8585532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...