MAL-2025-185042 Malicious code in sonic-kots-fudvitifagafyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8c62bc45813016f3b2b9c4c285e9ad1e3a25a0fa7ac34895eebd2dbce013ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-dfg-diwfzcfecdacb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 852a7788c09cf457a5ff92e47f56fe4bd5db435f073b66aaa68634f97635652c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-daba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e1802b587573b6f642253a25cc6d9fd55d00c4e10503f8f218ae6710a17dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dinuhkouhgoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53ca128cefe38eae4ab6a7a1562fd686c134a74a8ee4871aa42e28b1b1401993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knilu-bofavaunuffn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84f9693e0151ecb46b72968e7b4e9224ef14c860e9fc441687e44361f1f27fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kuu-bofaufi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca2618f4c3c9a677d76dd98d8f4e23fa2567422fe26da6fa5b54506e6a3a9655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-nofty-gam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7685c146e66fe3395b34a580b1bd3a90b417840de4b543cf8997cadf9e51f9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvog-dacak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60eb697799146d089002fb84f94854468a3626bc557b47afa9961f06cf53dc8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarage-olios-noilagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c375a46eb64142c279dd5ca7322503cba47d0a9ba479c9222ea5cb5f465d1132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociy-ng-gufaci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b60b4a291bb15fe3229d52ddc973bae5a475d527170763ca40d4607e6b03fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fangso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 722ce2a609a67dd48b610d7ce12903ab5ced13be8b550c4c3d91d167bb00fbf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kidt-avog-uvufacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b9c36e78ec992d9adc46a9b697d1683e6b49f87be471e5e2ebb994a30113799 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kuvu-baiufbav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20ba504ef0c66d6c94630fc61006a068072483bd1f529093880476b848316930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-obis-biabla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d245e5bacd434e0274e5b846dc174614b9686d9e18becf0e5d35b513bfd0a2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ks-ahagafuha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e38efc30314278d212a9d422afd08a0a8afacb71b91965c0d6c25870f2fc19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-akontolbapakmuuloltrtjygfsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aaa5215b894fff7f9742bab46c962cff080ff3b89161c2f3988ae94bff5d338 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitokik-oni-oladiaps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88bb78545dc9bdeacf5fcc1720cd2b74f230c9beb4ab9fac6d9833ac643f6e97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihon-afbaufcaducxabnyvacmags (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f606e0ec377b3564257e0d8115c38655f218daf98bf9e0ae433800497f75bdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-obis-biala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 868eedcc7066e01a05476f24c3fcc8cfe75f301a5d44b91210cf7c62e1b0701d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liobc-ug-afayig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e4004f6fca03bd20d0800f723e644f0c82118dddceacc5c67c286bac659faf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...