MAL-2025-183238 Malicious code in kisut-difg-diwfzcfecdav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93b050624ca5f3a9808eaa9a5249cd23806da15afe1f48fd896197981cfb7f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ug-agg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6b3040d937d433eba8f232cd5531f0cde46a9ee4bf8c4a21e069d3f18f5e18b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-afibaniavihid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c8655fc0ce25dab59313630866c7efbe4a7672db19b350007de0c04d277001a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mugiy-ajoig-daicutaaajk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddab30a7814fa4518f311d92d0cab99674df9ce469a2ca5547cf7b4ab8295660 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avig-ijimamfuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6bcb0f7340ca7f987b39b8818988bdbeb6abe2d7fe5e51088124e3f8e3b6a96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-anmni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06042ae5e81ce13c70f8bc807167a49fd6379ec2388d5b8e64ccf980867192b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ubg-atag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5093adcd512b066dc9b1a6b6ff139c73eaee5a43aa7e6375b9f3e8e24b2d37d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tgacedcuadojxav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 777d8d3aef0035162cbb729d4df15fe93797e0fd60cf8d8956bb0dfec86dc0cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-olia-tabalauoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 638f059eb52180e391ecb5eff11a1b32cee664320de204ce4dc5457cf48b876d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-faga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 839911df5eee7c783c483105bb63bae889a776bb393bcf77c80e808af55216cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-fidugafucfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31895d889007f313fd65a71f9d2f57c8432967a51b39e0b211dcb43808561f6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-favx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a000acaf97bb79d327ceeb3b7915f5276c51977b1335a385c7ea2d54cedcbfda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihon-afbaufcaducxabnyvacmags (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f606e0ec377b3564257e0d8115c38655f218daf98bf9e0ae433800497f75bdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kugfi-cmoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e9c44cb3b10fbd2b29eba2958693204100386e6624303b36d0b72945ec379e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kin-afuds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e500ac0bb902e6244d5f7bee90f0ed891400e015bc7a9fdec9837985201286d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-gioafisasiasloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 494632d0ed5d3b01f3bdecb128428ad7958add48a79bb3392d7a6b2e506f9d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-afibanaiavihid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6958dff562b82fc17a1ea8937511a77d1d150654dd15b151bf04e2a75ff5227e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olims-noliadgnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0a9836adef1bad129925b903f1e61668b03e908dc6b991e0b06cbb12d03d26e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goc-gua-vsojfahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9da3a5d4303008715d63404af0f8770a1cc4b5d5793724ded4b278bacfe7bde8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oifads-st01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dead4c459b0cfd179e730419c2163c0f19e700895a6142b5dcea9cd23bd52f59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...