MAL-2025-182446 Malicious code in imodiov-kufni-acumnacffgteafsgredcadfavfehxafeabfac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 581da1f5c7a82897e8b6909326a0e405918f978d0638ac2caa84de710100997c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bonijavuficvaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7aaf0697d2584cf37b686e1d0e0a2fe564f79758c494df6b6638ddf362fdd8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-nik-hi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92912cbaeaa0b6954ef1e5142231830dcac3e204b0a4d6809c1dfd4e3ae6dba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-omfi-cafacevavisvoetfamolcabyca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3353460c96e810a71e89fecb705699e7f7f068ba3f41a504885e6c35a444d358 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-dfg-dufainban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d39a215037ba9be96e617b4b7971930b8e617829cfd07e0db9c318443ff4002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bobacuofin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24398232ecb091000083827f94ebc2792bc2f9808fb9fdf8927fdc342d10c18e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mokok-lki-haj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e64c8edae9fff6c36a5caf69be345d34558a27deb515f4f1e97f87f058534465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kulig-tgav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ca74ed0f4f77b67b1246ce51373fc8a7193c051ca0d8bf024f9dc3d85f8f292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-koifi-cuidcavuaompg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8deaaa948e23729f6fa855ba023626760693c4bdd69c39cd500211fadbae3fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-aknkonbyunaymhentbangdati (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86fe6959427756dc9d653025da191e66a6391c9b18c3a20f8cc9ab2634756fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggmatondanggangyru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98a6439e1cf3bc73f18a6068209eea78029d3984d206ebe4379f4cf214577994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-jos-afisigafifaafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0461462cc718f1b6b5ca53af4a9511e0552961d93cdda85ba4ad4389b966a835 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyib-givaksois (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e1f8871b1e8c54c224e6742eae3abfb9a431ced856ffc104eded2a144108f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-faverufadix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44ec345c78072d294e5933d7af00ebfc69684a5ba7ef1be67645909fa895fa4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-agg-ib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adc4088f8afc583514c40a067e7480983cc6334549c05b0f8f7f68fe849191ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufavcseqinsdxaoycuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0304646051917d350b0edc1e91f5dc982723e5357a7dd7b9852d2f3b0b08d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uinaga-ugu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b60fd7ef19b7ad19a499b6f31e5c6d303e8a579274c473324ef7d3ac0ba8d28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-afsiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4509f94919490b3f60c76c3079c3d67392d10f1909c41f4333b00ace6ef44dc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-olia-tabaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b8ba1228ccef19f867c58e572b8bd92e4d69db3d4e63d00b4d1c61ef00130c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-au (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 462702fd1215bcb8c3180ecc922164b64d4a023352f90f4b018f1c7250cfe8d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...