MAL-2025-189146 Malicious code in reject-await-hash-try-try (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 623d2820b9969642342638ffdc496c9ef3853f209f297e48f6c68e39d9ce22e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55aad895ac26fc7cb451d0d81d0571f6fd875126a378df8b6407d41bad70458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-gugoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2381618fb04382cb6b6ac8f5c237372ed847fc0bb1b5fd82466d27c28637d739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atm-kujaui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5af5522baafd9bec27b9d67aef423412b1c02ea18f70bc44a3c803723aef626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-uga-viai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5256a5322b5e3351d7ed99ec2107bee69d5e815b9331672518e405f4747f0537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-jos-afafiofa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35195bf589359995435b89f1b92b5008dd9b9ba7f1b8cb6153c27771960bfb8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-ugoofifadiahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b530559eb17999e080904c04f92b015c7dc40f11441378bfd71b03a49071c70c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-alai-ava0buku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94d1ee1e4fcfb6d861a6ee2420abc019a04b93c35f17a482c32baf5c18e011a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irhar-aaeasdeadeasdeadef (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6939c2e0ca9e67b0035174dacb4af9b1a88a522beffbfa7911d7ac001ef79293 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-yg-uhitaggafadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de859f81187065c04344fe83c46e876755626adac45899338b81ab4c19d59404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufavcuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0268081764c2431c5af4c7f9458bd5073fdf7e39b1df757e32f1f2ec3fc33fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oy-gioafissioasloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9188ac92a663cff3c98b059afd975da1fe2419e2516bf131d65e04c2c39b3e72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-on-lakinuia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3da3df8ce72b93da4e21e5aca1c77195c5b2fe656501765d1cb6b8b8e28e63f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dan-ujokuluaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd418f93d91ee5bd14ee4e9a922937c05928bf21ffe4d2a9530bf34d76d1178e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-luni-huojakiavugagijim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04c197a012ee127a2adeaf0793455d0159513cd2359741e1b9618feb7da3fa74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobkaic-gib-giugavsaguga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3e3283bf6b5f3f20849a9d200ddbe0d9ddaa45651d094c30de2a68bd245ce8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-anu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afff5282c4994862959982ed0c13bca1d23cf25d10d80927dd37f392e860c593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diug-danmifoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a033a62bfb60758a3c0af3efc1b3442d2d0355cdcfe2446debfeca56941be616 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-gifaisda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 497fec8798263c93aab0cea87e6ac71e980c2b8043b2bd4c0468e6637c39ba60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuauscdocavgmoigbl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4156c84319357a5d7e1f70bf6e0d84fa50e89ff7be8a14eb63845474bb01ce8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...