MAL-2025-182092 Malicious code in gocay-guga-vii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48712e04e02936314b5cf39ced8900086678c89861904641f71828473917dee8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociy-ng-ugufug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83947443d80ea08d8744813bfbeb4ed665a5b9369739b4d21b72a918ff31f9a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-foi-gisagaan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c539db5704ef8e7763693bacc0563aa4e62a9f9aa4680934af0133690980a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-fagiufagugafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a537d26a3f1602b0d32cd0629586d1858929097fd1dd03ca591b48867e6125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-ugui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a694b6a23032e88b936c554d512f7b213c48c9e69cb95a884264766ee94c970f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-badadivucgafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eb4e0ca1d2312d9443fe207708edc002a34e7a509b8514a7e5a99e2f608c06f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifit-dabtauzai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f146f9d9b58c878ccd462a8ff4596ae93b48ac14e046474fe45627d807a2e52f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitaukailok-don-olasia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af9d31b6b44cd7a6ce31d19da5a708e1969b15df3b09ebc18d3e2096591188cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuig-alakanjitw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08d7f97074b17d7e43a3a09076231c1b7fd094cf18cad5ca2cb6ce1204b16abc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobaic-gib-gigaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b29a6452cb6597520604d561b45162059f32668f3cdbc563ef74358ff7c273b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fangaiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f623daa056305bb38d461108028817cbcaf149825d7f3628267459ea6d8b5a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-kubdzika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f2152b9aef5427b12a60cb801a28cd8c8c7f7a5b76a55ba8d58ab38dc383eb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-nik-hujikakiablum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020b59047fe8e919000f797ab34ef640193f39aa04415f2111ee3e9f796884cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-kvu-ibuagoufavyauacab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a363b2840910566d5e3498bd6aa7866a1034d985bd1e51889854211319fcec3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifus-ugaioi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd0a1408455abcacb4f6c1da9d0fc5e9854ba9ed547b943f90df732f46c3cc11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihon-afbaufcaducxabnyvacmgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f389db5681e67a2759cb6f8a9bc68ad3bcd823b28492a70f2a4f858166ade7ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-noti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde0f92653f32a9665859f81366c641dabd589620cd3746f09ca6e43856dbf73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-agig-igb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbf3dd89c19602b650642e62420f32e2cba8589e8cb4ef3f48e0ccfc34d85ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuloig-tgviavu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84af51c39cf785f2b5cd232572b5093adf96ceef4c2f288c8c956e8be42e05f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofeki-afahinaugai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 202f8b104a42e50a0b71b0a124efdd6327a934040798c44509c1ddf275dd589b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...