MAL-2025-183803 Malicious code in masolv-avlo-cifoiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a6a0d720ce4fec0725b721c4b09bf6925469801feb2eaee4b0e0fb58df7d627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-fudvtyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 209a956565cd05e082c1ae72c36fad71b0a85ce836e108de971c5f7f53142dee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-jfgauyuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f7182725aceee49ba715431e2f42e2b0799a77f94dc0969139765a8e240784f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitk-oni-laps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70bc013b814bb39527dadfbda3215f770d72caf832836687257e42d2a2027558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-danuamifuifoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98bfd58a7a46d32c702eccbf08b86194d39901377f49262a8299bd0f336fc165 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-unga-fugiuficagiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d363cd08b158703dc6730cf94524d09d034c510149d9e3e645894803a0ab90ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitouko-oni-laok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4c4bd38beb241102ca13f52599f59e4e3a513964e1ab40983c71806b2535046 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-fusiafadog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1893f30419643f2ab41912fec6eb48e901a31af973b28a4c0f06b26d542cb8ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ub-jfgayuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88d79e69bf6256cdac226c5fa8ef6d19557aef7d7441d83c5ecbfe7305f89ec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ubg-atg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34b176efc9e7e4e5b8a98de769bc40399b2ea2dad869c2b5405f228e648103c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lfki-hakumajiabusubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31f47abcc6f00e53b313223a472f4fb39d3866430cdf6b025cb66a611384d605 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-daoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78ec04a5e8aab74924a0441266637ca9e5b807675437eba4d3e1ae74cbb93ba8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufi-comoldecoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51aec9b1a89edf1d1cbf8b8a2b815da6add699ee7d3421213e006d0ef38edc3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuis-kjt-garfuafafawkvdyfimas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5008f9506a84ba8196515389256f0b3037df23d0a8564104c84ede534009a80d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-uavcseqaaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58f1e644b2ee581f6c33253618a58c48ad72b08f735d6e9a12ea9a6e9470b2f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-cocakmae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 728b5edfac1a2bef757ee6a0dd0c3a6b20c29c948bfa997815528a8e34969a0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-aig-iyucauagyafg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89377f9e4110b9f46dea808a5fdf0a1cff8082ac6fa627ad5a7645b28c23c3a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avig-iayfuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 059598bfb08cdd8226340c717a0a6d97d2b265f66f1d9e1e582b115739b46657 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lki-hajbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac7bb38d3c1f8e1527800137dbb2e390ca9fa7823a212f3911554d2f12279f06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobic-gob-gvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3e6ec628aebf57f425a0d5e399a95ff29a4fbc7c185eb78c55b3bfa2a4d1456 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...