MAL-2025-183174 Malicious code in kidt-aog-uv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a94dbace64b6167ef3a6fb091872bab00afc94357846cbdf0c2356276a39da7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodio-ago (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 023c6224346fadf88269213bc36d3cbf7542eeeee6690cc66c6a69e6f2233e3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-daba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e1802b587573b6f642253a25cc6d9fd55d00c4e10503f8f218ae6710a17dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avig-ij (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86d2aba984ce2de5b47a7ae076e2b1602871fa09e630e2bd77df44d92121c26b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-gua-visagoigojfahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3287b48b3f6ab20225cca321e3550b6557debb010f0cfcd053229d27c82db867 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutg-oidmo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a1671745c2079ec4163497048c79d60e5ee9d5b1b569ffddc39ca2602d7a49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutg-oid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea48fbcef2b35d9aaefde8490a7665e0923edd5ca9ff482f47681f1e9d200530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-gioafiiasloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2fc1acf0fe82ae20fef2414fca1b36ade8200ef4aa46bfbcab4e4cdc06d8887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olobc-uyg-ugoofifahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd3bd9b6f56fb9bfd7f89968807f094c455557663786523b1c0843c8fe3fc21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-afibaniavihid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c8655fc0ce25dab59313630866c7efbe4a7672db19b350007de0c04d277001a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dan-ujokuluia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9e38f53ee70091fbd7bb37b11038f4567f72bbef52ff173e8ac124b0f4e0221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ubg-atag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5093adcd512b066dc9b1a6b6ff139c73eaee5a43aa7e6375b9f3e8e24b2d37d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofeki-afahgai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44db8d6b1c6ff9c5ac8c2ea1f0897607ca4f40abd021cfa33261fdb44c04bd6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-afisigafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f9138d2047268c93caa4fa30b9c227bbd22a3c7553c9d524e5b20ae4d605d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-obios-bima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f82dc5cd74545a3a6c0ac3c40f35484b7ac0d074147705154eca4e14da02c3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-ung-fuguugaicagiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d272be9c77e6c68f8f199116a3517e10bb33379bc36701d8e0f94dd1e122b36d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-yafyudbruwegheryg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f208b8edd6329ac422182e812e945bfcf6dbd287a1a04cf56c09f12f7d8c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-oy-gisostsiogapo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7075f1b2f307be2b5cf8c31bbb407719d74ceb4b2789e975a00f062b1359c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dinuhkouhgoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53ca128cefe38eae4ab6a7a1562fd686c134a74a8ee4871aa42e28b1b1401993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bobacn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ea691e570dc70350a16621b044093daac76730427092574f20cd8d7cbd3366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...