MAL-2025-185286 Malicious code in tunis-kjt-gabisygf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2e49c7c35be072c0e0ab50a8e54918f119631df7a64c39ee0d585081e772803 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avlo-cobabsvov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 054d6849ef0d6973da1d7421700ce87d5d14ec6e9eb83c55a4efd9f472c0b701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-inlutag-idosa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bcadc78bc14254dbd719e8325c15697c0c420fff875055d7bca01dbb869d608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-ilo-cvaginanavcuovhu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25197fda80a96f611dc968f98305b34ad3ff8e7ebef2a36da1f418fb6844f650 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irhar-aaesddeadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f61781864bd2a012c3cf87943a9336e43e6bf1be3bc0902296573a9499a4571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodioj-agafajafiba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eeebb16745842fe5955a8d22693b0ef8b3e7a6abd86a7c441dc1553f652c554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-difvatav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 244d32d447bbd967a6895ed6044f0580769c2f95fa4d05cb2c6d5afd92f260d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1ef4df8c7a985e4775362f559e989f2b519d0e15ef117c35b6d6396a3d52d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggmatondanggantgyru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebba633d1e62e83180d0f52898dee82ba7f83f013cea6be5ec4067e58b1a2d09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-agg-iguqakuraduaidb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a3c7660585c3e53155c992fada8ad9bd6a6a9088604fa18b63d332087bf3c67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitokoik-oni-oldis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3938b2f5e157a209e749ffff3023a3ed5c36cf832e206fdfd99c5fb955e1c7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-ogolia-inualubami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4e2e44e7f5cfbee56d522da08697fade27491250de94613f8f6bdc9625e4829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oifads-gssofait01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cb081fd0cc926b141dc5f70f49c79ed09886a019aacf2fd7d63268367167a1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irhar-aaeasdeadeasdeadeddaaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b58e72deb3f6d429a6be14ec8768b80f74939c3326ea5f894c573b9ebca06f16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihon-afbaufcaducgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85a7a1481a6230d38f147bcb924a458f39e28950f0b4e424d5fa319d9965c26b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-guga-visi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a1f20bd9cb0bc58e595f39c6399bedb6b92035d94ffa79e7a77d6889d61b1b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-fiugafav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f16ec554d587a5d1cd5dae8554c1cda2b5b4994cbe52341c9cbe53a09d4bb362 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dakaioba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45b5573713b25e7e3c4a743c81ef1024c0720a5612a8bf4cdac1b5e14ab8d857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-faver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 252809d8699985524d5e11b5158af9ae32d914f0ede5d69842a67e828a354f85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-ontcami-lamoki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54d42fb90c7114d9cedcbda8b3ac2f5eaf8645678eebd14f45239c85889072d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...