MAL-2025-183380 Malicious code in lobac-ub-jafgbf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbb7989cada614be82f6fa1fb4b9e9a6ed5292183d3e61107b51503a1737907e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-foi-gisagabugailan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa17ad75901bd1838a76761b78d19b6f5ba9e65dac83ea7f2e014abbf01c207c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuaucdcagl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c596fb9b1dda079810de95ea2dc9a20e11e00fc78647b4eb8abedfb032b0cd81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvog-dnieamfnaiyugpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e1a57540a38496f5ba46d1d6f50c6550ae2b4754370076944880ff003559f6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-uga-agidugafufyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27f4754a1edf27eb0b3fb7470a6b8886429dfcebd232bfd56230d08f05b77906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kin-afbaufcaducxacs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ff912c0087efe4e11ff6a12bc496608a99126131250e1a19b34525b360b519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kilan-avamobn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2b1e429f77a11ea5a32b1060225f6a62b3daeda9776fb2b8cda453c55ab499 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labiomizzkapa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00a7b1e40fb648176d1e0c1a4ec91503bd92277e4458349299a73d22a18d87ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-gioafisasiasloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 494632d0ed5d3b01f3bdecb128428ad7958add48a79bb3392d7a6b2e506f9d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kiunu-bio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6001d5188697a7284d132cf72c2c321df8feb7ebcc7db18b06571fa87d026bed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-aig-iyuafg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 872af58ce2336516c4ffc6c35abe6eebec6aaee212e988f08f404d75035e30c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-agig-iyucauaugaafg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbabb95d58e2e4c9b68357299bf2f21decb77cec63724dc2a59890b7f64b4fe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilimo-civuffana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de38566b2dec2293fd9851d7ca7dace9250035144b7d33ccca51cd648a14f11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liobc-ug-agfiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 136dc1037e6abc5bd7b64aff99438dadfcb54e25bceb2bb1e1e7de94254a9727 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksgsdfo-ahksgasodan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bf529da0892989fff1061845ec9d40d730092e971a05923fc7b09a60ce3837a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufi-comoldei (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 163fa660fb2e0034ee629860ec0789e4330bf16e6c41ad0b67a05e84beb8e04d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avg-ijimamfaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf58ecbffd0025a078eaad92b8243c4a8a66d8a47297848beca0fc22195711f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufbaceuiacfoafjox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 282922efcedc55e3c78f3d4d0394c2e2b6e129a5963e491024b884652b58d0f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-inlutag-iduliabisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d915f4d779d1e61b8d2cbf6938a766c5e2e6971d5fcc796e4c569d3b140dd2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-nik-hifdagh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d019473dc310698506fc41f2bffebfc643b56a5c19788d985f63e04ac9b2a2cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...