MAL-2025-181880 Malicious code in avangs-olium-notu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b924c712f231187d4ce7ffc3b8bf1c42cd0de3721a3d287b6338c09c47839e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-fudvitifayaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b2b0f61bf024128737dcbbe42e099d5be6e31d7ec8a43cf8316f8ef85b1114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-noy-gtopo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2de0d6bf76286659f9c195be013b374834e4d9aee3ba39394c5ae74258d61493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loibac-ubg-tuagaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 670d14b2f4ef3bfbef032fd90ad00a1c5299a6c299f06ed05b4978bec32014b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-favr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af7858c82682c285822b8bd8fea2bc14400481b3d649ff1853cbc2ed6d31befe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-oy-gisostsiapo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e715e59c8b5977c7513fef29f45acf6f70cab04196e35dbb97be88ace360b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avlo-cifoiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a6a0d720ce4fec0725b721c4b09bf6925469801feb2eaee4b0e0fb58df7d627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-oliutka-taii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26870ec3dfe7116ba8c6d3fa509ae87026a1eac817ba2b983d011c0c6fe93e47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kidt-aog-ufaiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd53e975e516f087656c2d74400dccab456eb8f9f84fafbd42e38d2950aec662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in asta-alikif-daka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f9fa2513e8f5dc7b7c516a786806b4ccf7a49d8bf782d99ab100708d8790e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-klvu-ibaibcamauvaavafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 923a73e26e2d23bc8b5ec041895f0b41a481388ff38374362458af8d0cf43485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kuvu-baiucaufabiav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8f5688c2914ffad3f40e1ee5a781dc92fb59dbb1639935a8bd4fd1ccb19bf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuwabimagvl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6fa67e9c883ea8ccc10647d7f1646351355c60c68f495ea18e1894ac93703e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-uhiafadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ac2bbb8746636446b10e7a2c01ac67a3076946a5c53cc75bf9c45a8dab537f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avilo-civbuaofoiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a931196ae9d34edc8fcbf02f3f2a81231debfcacc4ec15099a04258de316db3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kidt-avog-uvuffacfeaaiafv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 910a9d65355299748bc78ac9ff8962eaac96ad217854d75758b256962d443480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kjt-gabisyygf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23cfba3db76b92b4910a25a24fc63a1210042693a6a7bcbc73443a6c481875cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-yafiang (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95b8c921a1257fd724917b4f9bcccbc35f585ea7bcc744938192d9c7bccaccd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flight-iloamtag-ziumaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3d70c7aaf36a15d61b8257f885d28f4c69113fd67fe51d487b5291d4227ffe6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dakioba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2072be1e4b81fafc16636d08c7da67b136ea4f22628732162ab560537cd9fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...