MAL-2025-183605 Malicious code in lomi-ifush-ugiko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af537ee3a51b73950e8d4ce70be057b35634b8c10abcf383d3a3f82f0e71ac09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufi-cmoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cdf9bba538d14aa966721dbb920ccb418f264306e58cff56c1b8cfd2587d00a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-gioafisasiasloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 494632d0ed5d3b01f3bdecb128428ad7958add48a79bb3392d7a6b2e506f9d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-afibanaiavihid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6958dff562b82fc17a1ea8937511a77d1d150654dd15b151bf04e2a75ff5227e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-uibg-uha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2029ae0d40a4aef830e2ae70332d848284bc8850f514f36dc8f7ab6243198c59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loibac-ubg-tuagaufaigga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c863ce7b678821eb450df113b3463eaa6e673ccbfe48f1428fb033c1afa528 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-ifaff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4fa3c46bada083cce71e202a60c9413bbdbdb424b6abfbd4bc2195525aff702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olims-noliadgnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0a9836adef1bad129925b903f1e61668b03e908dc6b991e0b06cbb12d03d26e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-alakanj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d6936b8052325db59c912e24168c88ad2818b302b2420266387acad58d292d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-faga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 839911df5eee7c783c483105bb63bae889a776bb393bcf77c80e808af55216cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-fidugafucfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31895d889007f313fd65a71f9d2f57c8432967a51b39e0b211dcb43808561f6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilo-civasm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 378fe054beefc13793ba277464b9204b5a1d12c9bdbd25806ba6e44c346992a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifush-ugofalifuafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a87a7b0a0c706a910925fd2cc80367422fa6d946dba62248254ed3006c9b9353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubg-afdmafdaeu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f221ae645da73c92a9e5e22c86e9075b36901801ef0fc4ac1e9bbddb9063b9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-noy-gtsogapo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24fa7f9a6584f48853c49044d7fad40a0c6c329189c35392f261058749962cd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goc-gua-vsojfahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9da3a5d4303008715d63404af0f8770a1cc4b5d5793724ded4b278bacfe7bde8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofeaki-ak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b55cf4296f17a024700d1f446ba4e41a33842e49ce832a6bede0b1b0c1c25661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-favx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a000acaf97bb79d327ceeb3b7915f5276c51977b1335a385c7ea2d54cedcbfda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofki-afungi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ccadac53b0e4e833d35a8623c6d619cf0a052047e246cda9faa527f3b61af1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-if-dalik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7027818a15c3493529eb3be43b0293d7a12ac52f6f81ac5cb8469801dd2df17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...