MAL-2025-182811 Malicious code in itale-adci-akontolbapakmullfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4dd6c87dac47abe0d3558bb0e33ff8616fefa127701a503598b9f381125b928 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacffgteafsgredcadfacvfehx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ffa4cbfd855d14561f1858b13a7a47691b9b26034f428531d0bc7c7f313b73b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-omfi-cafacevavisva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c44d41e3b1d9a79947369bdde1db715a86ad888babfd9b6316065908b2fcf63f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olioms-nolib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 802d505d8f3b5ccceaf27fcad6aa4b13d46962d94ee0be9a6876d742ba7d1b6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-cocakmae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 728b5edfac1a2bef757ee6a0dd0c3a6b20c29c948bfa997815528a8e34969a0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-unga-fugiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5686ad4d7e8aee14821d3828852e26fb248ee2b18a743b637b898aadcf2a0403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-daknaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f114a0e13dc53b26a0866ae5456eb75c877103a70e2b7ddda4d75991ad0516cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oib-givas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d941d5a9444f3db2109822709e885508bc0ab5ec8c2d636749a4fa314cb3371d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ug-atafiafaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f562228fb13b0286d654d4379c0fb97a654ac9034581bd7bdc8a2bddcb7b17c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uinaga-ugugfagafucfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a6e7f2865861e5bd7b5e33eb79c3fef937f3294d082ffefb6b30f603839786f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kinu-biocuab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6dd5d3d7479c9afe47508366fd892a9ca5517781576d3f5f57cbebac50eb08d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tnadecav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c928f19474be5bbb1a7a3db9ad415791580838b8fe36edfd616cc5df9fa988ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasv-kuu-bavobu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e9b95df812580bd4a2d179b9b99c05f242ae6163e2ce2dcde701d8ca2bc8a8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55aad895ac26fc7cb451d0d81d0571f6fd875126a378df8b6407d41bad70458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kian-avumangaiab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccfd3c964e1788fbabeddf31cdfcae54097b7392ceb36af96ce87646c8adcefd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gisiasugo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c818be5d8a9f0ab002ed67eb41e9de2d8fc7c57f345151ecb9f9684a234bbb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rryusyfsytt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe9422c8cdc61a842cfcc9460fb6ab0e381463e8a3da92d6c99fef1dbad4e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-obios-bidabila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8de3f69fe6ea1156bfe28239c5880f3ff07e64927e34a3311d060496bf585665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kulig-tgvia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5b181b23f1d3a02deab53f9ed6117edaa96186bf442545c0e8f11c012454d01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-olia-iiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4665eeea91c995463ab53b5921d6875ef2cc60091925d505e7ee6d3da5cf11b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...