MAL-2025-182873 Malicious code in itale-adci-ggryuyegfjbsgbajtrnnseytefbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c51c44dc843dc476329abef9e8ce695979f799be8c47c6488ea7621f4af8e9a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labieaoka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9704de0d0f13ef4305b9c08c6b6ad4589a330405c7c8b29f2fbf1c5e05cf336f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-srtrt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06f872e197eecde6b663d8ebb54944c8340688b215a2842af02d926cecda5df2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutag-obolavuhduli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f0a7feacc2c64123d2c5f520183283b5fcb5cce09ec002b5b3f28ed27060c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodija-gifga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc7c5c6fc8b12b73ab44f0a8a2a4c5fda8f02b6e57796ee18a0fdcb892401740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuidcmnag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27102aa3c6e7f7b73622f49a00b439ba7577374e3a5eb9e33213564de9fff72d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ks-ahagafuha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e38efc30314278d212a9d422afd08a0a8afacb71b91965c0d6c25870f2fc19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-adifailo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 808a0e43959ee35c1b467f49e1d71dd847bcca8ec40ba97188eda9409353bc39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihon-afbaufcaducxabnyvgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2ddae6fe580a1b001b6f7a4d70d57905cc5be0954f220f4e3198dc16cac78a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-favefix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6765ce51b839f6ccbadf83426629081f21869aa35fa11fe83300e8d72324bf30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kin-af (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4da1729bbcae4812204c9e05ab0fc873e9b9ac7e5c370736614d174912f0cfa8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvog-dak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb3512f9289910cd6d0f071e5f5dfc33d479e012fa42109b2aa313e25e6f1da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-doni-olodaikis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cd9fe9fb328b5a20063f9788bf2f6343e65667032e4fa8b8d095ef96a28f612 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irhar-aaesddeadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f61781864bd2a012c3cf87943a9336e43e6bf1be3bc0902296573a9499a4571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dabualiukabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3de57f720e506edd5d797abf4b821349e46295efc27d6e34ca679dc991314e95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodioj-agafajafiba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eeebb16745842fe5955a8d22693b0ef8b3e7a6abd86a7c441dc1553f652c554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ijos-asanuoaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 566d94f63c8b668556facea60c9b7825ee0c6d523ec6deb6bf263e472b060b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodij-agafajba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb37b7a9549b94fb88d09e97d543d390ce8f43a4a06ba8656e9b48ef593432b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irhar-aaeasdeadeasdeadeddf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 057994f1c79a9ebdd43a275654b54c44409cadf8f880facb440ad9f159cde661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-avcafivaivcd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 023c64acefe995d2f8caa73122bf613bd9105a6a9a34af48c6d3d556042fff8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...