MAL-2025-185294 Malicious code in tunis-kjt-gas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b77bd1d7457e1bc5ebc6f217c1865eb141c9ff289a69122888bea076e5f9cad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-unga-fug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18126ffc4821ecb116c0aa4cad953679d9bb49e7a39195d1590d8a1ddcd3568e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-ogolia-inualum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21463c7d9d7288978044e1937674f99c07f9b3f1dff7a9ea08f6bb615fc4b5dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-agi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6c9ed36ef6df1a66b8853f690979da604f83f87eb9b6dc14e469a17cb8c54c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiudt-acog-fafiug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969034054167fa7e4f1c26d0bc110998f524ba803545d95413e45cc00a21d30b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kidt-avog-uvuffacfeaaifv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86b8563af92242dedd4c15dcf6912f28f119c6da3fe999eba0607c030555183b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-klvu-ibaibavafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16c218ef66d2a9307c4a12f69ff74432e69cc2f9a27e6249a0be7e944001218b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-gifu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459e75e018a67f5cd5f78e2c6143d80b38b5fec6a97298d205ac8cdb217cb86b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-alai-avku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ed9f4e3aef4fd55f019e31a9d4c890a5e79311f8cd811b376acb3d9f29ad9de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dn-olikiakimua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 770c469a13b0c0f8d96241abf67a40bc755482a41267266aa39363acbf2cf6a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodio-agov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e9e77310f705c623759470d21a4b36f15d8c948980fe42ee9800f0080024df9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oliobc-uyg-ugafabafiuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0422b9c1ef52879dd2f965faf4a349188db74fb135422708e88958972bd74669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksdfo-alfdaasdugsdgsdion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8baf25b7bd8fb4833066c03c5bf1ff9a84ef2502c8fdd1ed6c78ea6e1ac833a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociy-ng-ugafuafug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 533222ae155081c40bdd78be6e0b6c9adec0532261b333b9af4bff9fafbf7a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufi-comoldecoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 980942773f1738a9f96b560c1c3535b71166986ea0ab14e646e52f99d6af8426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-danuamfoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 728036e3c0d8f113c6a5b56c8d97ebf5db2d76a02efdea7d9c7cf209b2e9625e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuloig-timeseyaxa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3a6308c15f251413654e01436e64a72a9ddeec67a68e276fe0cca2ac5c8aed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-oliuka-tao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 817ff275584cdb911180b4c7329427cbc069e506e830644435589612f6b763e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kidt-aog-uvufaifaafiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ceb84cf02bf439536deb1e73e015951270ab0e9ec944b13192a938995d693e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutg-iduhisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0b31c70d46bd76f0e997e469790865ebf9ac8591572d39048e0d42685af3299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...