MAL-2025-184649 Malicious code in odasv-kuu-bofauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 671ac42e26ca631bebd6ac8cc3ea966bb11422ea27bb3c80c3d0fe49fd5f0c62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-klvu-ibaibcamauvaavafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 923a73e26e2d23bc8b5ec041895f0b41a481388ff38374362458af8d0cf43485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitouko-ontcami-lamokoinabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e323c5efe3a8e86ac33f99b5eb648b9ab19e340190ba860aad4f9457052d0a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihoan-afmcaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e4ea60d1f24604f9b4b0e7279740dda50741e15893139803cd4028b3ed27f07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-yg-uhitaggfadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb5fa222716ce94fb2b90cff3ee7d4fe6aee31a173d7b569a7a3447c3f476fb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufbaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd32727c34463213d57af8b0e289db4315befa3580c526d9905b6c5b9103df17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mokok-lukani-huauj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 861d0ad0b7fdaca76a4848911ad2e582407af7b29f5d53c7bad8bf7c2008b470 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitokok-oni-oldis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86e67efc66e330bbfb86761efc806bef74bc613b705b2f83d32ba737b76b1821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-diguafuavaoatav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3135752c986bb42b3833f73afd859cb408cf86fc23f8b5804774d0c40a871303 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifush-ugofa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c8e18f38edbba8b29d881ed50330de5f917b458ceff9378ee7ba9cf48ac9e80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiudt-acog-efag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15715e6d12da8b731f4ac7a6c19565d9cb1536148d7bfc41366c218f72e8972b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-nt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cb983febd18968a8597732bf01c611ca293ca69c6a38ec0b596c88fa6ef2550 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubib-gafufunfab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1be4bda1b8ed3a94c739f79179298be028e1479b7422af6f96e7e59be868ba2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-oy-gistsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 580c2a19d202109998de5c16fd76146b3dd4f2bc3d42ecdeaf88ab9cbae66e93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olioms-nolibayi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b7358f02fdd1e3be680cf0861d22c48f80a2b801b6c93fbcebafc2ab8cfddcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kubu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 037fe299eddac5e596eb43434e60ab3e6d0f2945568b168031ce7875fb033ff6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dabualiukabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e99d54fd0dea0aeb05820c33dce0b92dcc0cbc97257d93abc4b5291d368fced9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rsgustduet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf2544e9734a5d4be31355237278167e1daec4bca54503875bff6fbfe3fed73d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufi-cimoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ecc9880b9618bd6bf5e7b048665bf08206705b549143215e0c615be7e12a311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifit-dabtauzai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f146f9d9b58c878ccd462a8ff4596ae93b48ac14e046474fe45627d807a2e52f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...