MAL-2025-185263 Malicious code in tunis-kit-bogavotaawfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b66868234ffc22c54dd48fd0efb37230334117a47d667d8825115ddfe72f840d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-zjzakuika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abcf309e4b52cb4ec9513ab77c6cdd449be30f5cb89337c53efa28605386c709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-dfg-diwfzcfecdacb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 852a7788c09cf457a5ff92e47f56fe4bd5db435f073b66aaa68634f97635652c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kugfi-comai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac79508ca47a94d55c4cc7547eef66fb8725376a30a481ed213b470698e7db8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ykhjyafiznol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 743ab8fb33ce6d8646d879489f3e742536d234239105d42b45dcb0f6582f942f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-nilua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5021dd9cd99a52afc045324c2a21f31076c4472f4474796508e62e62656296f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labieagyeoka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b86124a8d348a345cdc37b4cb3d8d3eea532116e20025a55657903c92154fef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-avg-daiajuj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2fc4e231c40ef4ebb32a941888abb17601bb68d4a7d2d51617390add70c0562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilimo-civufavicasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31509ff088637429685bd189a2823d92535c97ddc80675efabfc95e318c12efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dn-olikiakmua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36cfad99d24b0cdbd85d9b5afe158478c775407a096f2a48478915f7f42a4df2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kubusui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b6ef5c8ca17d14ec9ce8f81cb76b35b6e4d4849a2010b80421dc275572b264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-don-olia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 982a0296c6a0618ec9b70ca8773dd162ea47c45c61a35c07f222373ddef985c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksdfo-alfdaasgsdion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b30ebd578af6298d1dfbecfbb0fe2b1f73c2b987e2ad2e40c637abc8a1164446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-foji-gis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc723934af849f04042b48083282a6f0cc351a3fb155090890ffce0d5ca341f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodij-agafajaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50386485ce33a74b451a7f64ea42c2e138dbc4d7b9a9f6ef26bb5b2664794cdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-fudvitifagfyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c434037e1504e747120a01614ecdfb71c8387f3b519122eadfdb4076701c44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodio-agaji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95b45ef014c387fa642cc4dfa60208860b2b767feae6fd25afd2b81af0d5dada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 619a5e9e8df4bf5c66ecc3496a77e7bd050c0323485273bdcd08de09ee71be21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gisiasvugo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2dd7291241425b1a962c16841c92cd702e35fd7eb3ee1736f0efc00d4daaae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dablika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e541922aa2bff9f15a5bbf54aed7f02e24704338e2485c2257274619cb3b71a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...