MAL-2025-181933 Malicious code in flights-ilutg-idaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 964f11d81ca795dfaff6343ce2818b0cc22dc2d230a6e62fabd10874586b6e8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uinga-uugucfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c9bef97a49c5762fdaaa911484abdc87dcc1b440273a56ca8bb7bbef95122d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oifads-s01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8521995225e5401685e29cc8f4fa7184c6ff1bc94cdcc8fa2137de44c3e33fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifush-ugofalifu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff4d7bc7f0bcf5a4d34260946823466347c2d1312d4b8f8932c0f36cd896dc39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-avg-dudigai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ae213d05bc7b2736a6dab621d9c6e41f68958d25eade3aaf816e4e259b76e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kt-gahuvfaduf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95cf3bafbd345c109b58f8cb2289a60ff31d69383df116e6b5747f356d147a23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubib-gafuyfb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 923f22842c56787224a76dd5e83469d88490e6b22106b6d05d232027af7f0290 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irher-aeswasdweaddeassaedaeaefedeadedefredafeafaadde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a06b282e8842edbc72988536f00ad7bc8421726fefc1821c5d21e75c1735cf76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihn-afbaufcaducxabnycmags (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a66c3aa60d407c52581220a744dbfe87d960a979bc8d5ab02d4491add882900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-akif-dak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4857c32a5bd3b949470c99c3240ae9fa3d15dbe26b49470766177863321120dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olioms-nolisfasdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9099ad984076c218a195b5657b2edbc59e8e157ebcf9f6e023bb566f755526c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-if-dalik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7027818a15c3493529eb3be43b0293d7a12ac52f6f81ac5cb8469801dd2df17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-uibg-uha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2029ae0d40a4aef830e2ae70332d848284bc8850f514f36dc8f7ab6243198c59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kinu-bobac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8344e78f61193872306260e62e6648fabc0b82ca4615dd652d88424e0595c75f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-avcafivaivcd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 023c64acefe995d2f8caa73122bf613bd9105a6a9a34af48c6d3d556042fff8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-daikila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb054a3059e3b12739b8c71925ef7a4a79afeb64b7cf42dc2a27bf6971d6d4e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-zpojozika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87a91ee02dfb78172eadebec4823ebb2d004f2366bd0d1ca6b60f80cc80831f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-aa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14ce6fd1c582a2dc4c18581b402f29347c8029e0b1c5981f1870b3c75aa6879c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oids-gsisofai01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c47367793afca5cf0f9a35ca32583c6a4a0be053b983cdb0524d91eb0019a2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-foi-gisagablan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e66ae694d97daf0aab6db334ce10ce6ff06b63466f9575e1ffe73a7fa0d6603 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...