MAL-2025-182574 Malicious code in imugay-avg-daiugjdij (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78baeaa454a06ad049799473e90647b071b7f9be3845bb1a57a6b1e8c69405e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oliobc-uyg-ug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ea70af88fcd9bab733dc89efa4fb45f7d1ccbf4e86ca102bb0fd890bca527f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kulvu-baiucaufaibfuav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10ab12fb8eff29e01419eac996d9d1cb13c9305c3d5b51a1adef004cda6cef97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oihg-moved (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c652a077a710e6c4246db983415fcb1375af3f6353a1a9ee5f20fa7bb34c4a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kin-afudsaczubfac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1223b4906e4c296f6723c30e3001c4e48c316b85ab5e3027f4e6479a7c9a5cb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liobc-ug-agufiadug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c897340ef4b7a8cd21b4686e21c96386be6e1913389992c84981e3a5f2aace2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-avig-iy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f7be7eda584d870fc1132efb3a42a1dac2bd60549d7d7ff84dad113516b8a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-ogolia-inualubami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4e2e44e7f5cfbee56d522da08697fade27491250de94613f8f6bdc9625e4829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dinhkouhgoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc84f060042a8fdfff4667dda8269d1c310df0a7c209f8b20d5a641cddea17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofeki-afahigai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3418899397227f3c940bafeecaea65bd5090d5a2bb725f3194d5c796396fbfab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarage-olios-noil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bab0fc0d0d5367d3546bbea0a80424a641173a3c8e27366f0b6df88c3c2538fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gisiasvaugo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a7432e81c6cbef0f0ff1e29eef6e0bc8ee4e2ba835b87cf3d814e3c0c7aff16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kubusu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aef8a978d0ab885eaa97886b9319fec4e450dce689300e7536a213638b61de6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olobc-uyg-ugofahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c89d89eb303c3d0b69c47c4760df9ac6ba33f27dbdd7ab0bb6a832fceea24f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dabbamikiak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 377ec3e14f291fc84dbc0c0617d85162db0b4b5f5e5ac5f2e4146a9c6fb4d0df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bofvn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c51fb51b53fd43c5d926764c9c3487bbdc9e3bf4fa190071796f62eba85f1f3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imalok-ofe-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e3d7f3037441530ff54d40eaf0e010501458dff8b615f758e9aef8a72b6d15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksgsdfo-ahksgasodan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bf529da0892989fff1061845ec9d40d730092e971a05923fc7b09a60ce3837a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-komfi-cafefgxadad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2de78052fbb626f3b7026bede0f9ecbd994c9a9e6264071f89403dd704309dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irhar-aaeasdeadeasdeadedf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4d15729b5e44715df37bd9d68987690a3e4c80b2a6698ef27ef580566e888bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...