MAL-2025-186708 Malicious code in elektra-jekyll-ini-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fbf52665ae1d41a82f4ee816cb50eda1d84967893a958929d8e2b5f10e08e40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-ssfres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29dae9d62376035746c8b57804f56d26d5626ec2c4ceb05cfd29da01ec89af9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-noliu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4b4f3b9e3ceee00446b5c107c09d95da19afd580ecfd4e464e956f7e44ceb19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-gioafiasoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c0348e750a93c20654c0fbb6e5eabdaa7814341176adb473e55e206393df7cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-ung-fugugga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50529d6b024ee5d08a7d009c7925dd2eda3e4777ddd73b1110cc9ed4503d9015 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-uga-viai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5256a5322b5e3351d7ed99ec2107bee69d5e815b9331672518e405f4747f0537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-omfi-cafegada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cef4ccfe7c8c1850969e088006319b2c3a1d4135b5ba007a7d4e3728dadd474c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-duoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 696e404c1daf42ca7ea9195cf0636ecd76c5da3043dabba1fc7558e1e4965a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-labiomza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863a596a92d156102199ba8efbd2742f65369b1905278e28f1be58965c0d3f96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olios-nolyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffabe88ea853e27dd95137e27b673a8b05c774186e95205381c63621621c65a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kat-ihu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 401662b1dcf1ce86735ff7b77e3283e697224dfa160dc13d35fa76af925b1399 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kinu-bobacuoain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 571849d358e169f60c5745f4694daf6f53b59d6da6841dca5e14fa2743a8f2e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-ogolia-inualum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21463c7d9d7288978044e1937674f99c07f9b3f1dff7a9ea08f6bb615fc4b5dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufbaceua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c623c91476187a9738894762a28c366fd9f73827daf55b4a88d4d38a6aa30a62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irhar-aaeasdeadeasdeadef (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6939c2e0ca9e67b0035174dacb4af9b1a88a522beffbfa7911d7ac001ef79293 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dablia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf78f752d5cce1c84cf9e0ecc5558bcf34640f703e640809dddcdf38a6f878e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-ni-hujikakibaum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d3e61f0e36dcf2dfcc4465460b7e9c18de2f181bae499f07141c1439988da3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uga-agugrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97eecf3e109f12a4ee140bf213080dcfdfcbb729de5b1fbff52c692ea9651240 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-nofity-gaomni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f29e1d83085ca512494d9559f31b5b3e577728c2c0f00eea9d11836e47aa3ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-yg-uhitaggafadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de859f81187065c04344fe83c46e876755626adac45899338b81ab4c19d59404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...