MAL-2025-185297 Malicious code in tunis-kjt-gmas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e47ce98eef9870e2009e90ce5a0deff8a553d066dde13e4256b7429b7e7f10a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182675 Malicious code in inda-fodj-go (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d7ca5488efb8fdfea31367f059a6a57f749a6ec24b04b28b5683d8d808ed19d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-ung-ug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb81e04a657f1fa8eb340576620eca1aaf37738aa8026e8a5cb9d59f0aff6e07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-afisigafafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51dc77fe91f8f16da94855493ee1d2d7624dd0bf33f56a0d7df7b6a5d0e76158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-adinolo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01ed3dc124963ef01056912e76eaea3d55464ed7b342dafc2a59efaae5b08767 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rsust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b1b4128e62439d286415ececc852c7a8bb5bc143bf54e53c1c2225f0b91613c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-ontcmi-lapiokasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e56f083d7d097f8b3fcabfb8bcd140e401bb7bf34eea8c0278483fa63fdd8a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-avcafivaivuviagfavacd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac7e41673d397a064bd48843880d5504ef620c41d802d987d633772b90cbd7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rfrttytr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9ff8fece47c9fc297ff4ce2981b975853887860a4531ea070506a17dbde7429 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-ugaoyugafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f644a00ff76cd2bc2ac4ab3544cceaf028f92f16ee81127e9e56fa20afc0520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaz-ala-yulabaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c29cb1c1b0c9dd4fd2481964fca56853bd502ed3db1da07d37d3eb84032ffa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ug-agagidug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e63926db995224cf8e6e466019f3c68fa062a3343ce762ff9343c7dea749853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-obios-bimaaogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fa859dba0320e214b64becb496c2d76474138c84ea0c45735c72f5765159418 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kt-gahuvfaduffadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee0d875b04d0a50b3e48ed7d8a366fd8b8c4a8addc70d46dc92d190d3e106af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutag-zilsdsdfsgauma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee722dd2c06d347a898820ddf689bc23d19751e208ebd9c6e5f8422242ccc9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuwabimagaovoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6621712c2fd9d1858b2207627e8158a556fa1330ba0e203f22d0128dca09ff77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knlu-bofvn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e70a9309b7c08b9b2c91def6f0c6654519e2c2f19f2c09ab44124375b4f15d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-labioza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d45b61fb1b99c6cae867832be66e64e38f11220679f03b74b762937c8337097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-gioafisoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e948acc55ead6175abd00658e2d85ccc65c79f1940193cbcb0069b08771f731e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kuvu-baiucaufaibafiav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 369e0637ed5bb8619008c4a91046259609365d3409c40c25b3754a75bed8d5a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...