MAL-2025-185132 Malicious code in sonic-kulig-tgacoav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbdbc45584e7ea9f4ad817d8a84485291791cf61318a8da323dd938a94199fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-afibanaiavihid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6958dff562b82fc17a1ea8937511a77d1d150654dd15b151bf04e2a75ff5227e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-if-dalik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7027818a15c3493529eb3be43b0293d7a12ac52f6f81ac5cb8469801dd2df17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-uibg-uha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2029ae0d40a4aef830e2ae70332d848284bc8850f514f36dc8f7ab6243198c59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oifads-st01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dead4c459b0cfd179e730419c2163c0f19e700895a6142b5dcea9cd23bd52f59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kugfi-cmoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e9c44cb3b10fbd2b29eba2958693204100386e6624303b36d0b72945ec379e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goiy-ng- (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a289049f72316df99cf0f72b6e1c93653cae13b750758873e84ce83f6020182 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-alakanj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d6936b8052325db59c912e24168c88ad2818b302b2420266387acad58d292d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihon-afbaufcaducxabnyvacmags (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f606e0ec377b3564257e0d8115c38655f218daf98bf9e0ae433800497f75bdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofeaki-ak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b55cf4296f17a024700d1f446ba4e41a33842e49ce832a6bede0b1b0c1c25661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ug-agg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6b3040d937d433eba8f232cd5531f0cde46a9ee4bf8c4a21e069d3f18f5e18b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goc-gua-vsojfahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9da3a5d4303008715d63404af0f8770a1cc4b5d5793724ded4b278bacfe7bde8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-hykaulaygkytang (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e1acf95b54a8a6f1b93685f71bb39106292bdd7114871afc82fbcda5463911e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-noy-gtsogapo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24fa7f9a6584f48853c49044d7fad40a0c6c329189c35392f261058749962cd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kin-afuds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e500ac0bb902e6244d5f7bee90f0ed891400e015bc7a9fdec9837985201286d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufi-cmoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cdf9bba538d14aa966721dbb920ccb418f264306e58cff56c1b8cfd2587d00a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-gioafisasiasloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 494632d0ed5d3b01f3bdecb128428ad7958add48a79bb3392d7a6b2e506f9d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gisg1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1552eb8c34c4f3b20aaade8fc8b25211d13be55f2101452766998878853d8db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-favx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a000acaf97bb79d327ceeb3b7915f5276c51977b1335a385c7ea2d54cedcbfda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-ifaff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4fa3c46bada083cce71e202a60c9413bbdbdb424b6abfbd4bc2195525aff702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...