MAL-2025-183887 Malicious code in masv-ilmo-civufaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c91892e13e1323d6c75fd13394ccbae17ea52bd9f41f3d3161c9a0e3a19ed845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-olia-tabalauoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 638f059eb52180e391ecb5eff11a1b32cee664320de204ce4dc5457cf48b876d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ykhjyafizgnol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8f0d02004ff1cb6a7e9457dedaa698ac66154b63cc9f6ff99bf535a4371d48d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofeaki-ak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b55cf4296f17a024700d1f446ba4e41a33842e49ce832a6bede0b1b0c1c25661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-jfggafuayuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbcda6f04a74cdfe960e87440eea2052b93e49ecdf039de2001832cdd60a83e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ubg-atg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34b176efc9e7e4e5b8a98de769bc40399b2ea2dad869c2b5405f228e648103c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-ogoa-inubami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6677fd05f1f02aef027597bad7104a21a71120ef425e3b4ac390b5b869355f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dikouhgoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84bd10dc966774ba0ec879a2d5d71d8eaebeccd4ae5586c0950bb9f9fdb3b395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-ontcmi-lapiokamakuasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a4f20841a057b8f5bb2a0f7c3e815f594a07a1c3f49538078b4a0ccd387058d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-nofity-gami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae35ef0cdb412e48c5e641978ab4e67693914eee7f5d0c188f13b5ed87ad040f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-afibanaiavihid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6958dff562b82fc17a1ea8937511a77d1d150654dd15b151bf04e2a75ff5227e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufavcseqinsdxaoycuuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94cc6ab69b95796217d34691099eadeb112c1af67af8455eb070fbe3ea63b034 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kian-avumangaffgaiab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55eabf97fdd3aac34f4386a4aa6fab4454e8f2c305a9be82c3a3702e5a464936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-afibaniavihid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c8655fc0ce25dab59313630866c7efbe4a7672db19b350007de0c04d277001a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-alakanj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d6936b8052325db59c912e24168c88ad2818b302b2420266387acad58d292d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-if-dalik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7027818a15c3493529eb3be43b0293d7a12ac52f6f81ac5cb8469801dd2df17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksdfo-alfdaasdsdgsdion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ce6752072103ca1c77b5c3b0c4bffa46802c2c90910eca2fc2c742f228e58ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oib-givakisas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e865217e95eaab01f0e36fc85fc5861684e2bfb9895a21b1bcb976b80cb2595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olims-noliadgnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0a9836adef1bad129925b903f1e61668b03e908dc6b991e0b06cbb12d03d26e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182896 Malicious code in itale-adci-gnuygukjri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f260bab9e71306fa794dc6064823a30b055b1c48f6f6c9c78b70d4e6663c756d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...