MAL-2025-183228 Malicious code in kisut-difg-diguuota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c372d417f73ef5a6d31e503317e96cb7fbe3e7b11d0c69b52ea4bded4d2bb20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-faverufadai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8916e5898e26547565a07c88d890461c7e3324723141fb34411c4a291f8830f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-afibanaiavihid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6958dff562b82fc17a1ea8937511a77d1d150654dd15b151bf04e2a75ff5227e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-unga-fugiugfaicagiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c27d9dd0ba72271f4efbee7ef3c2f4ef60ca65d6cf4449ea08c0dae8fac4a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rrsettt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8191cedda4515003228f4e351e32614bc6cd65adaa9a0080675200964b3dcc90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loibac-ubg-tuagaufaigga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c863ce7b678821eb450df113b3463eaa6e673ccbfe48f1428fb033c1afa528 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-uibg-uha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2029ae0d40a4aef830e2ae70332d848284bc8850f514f36dc8f7ab6243198c59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-if-dalik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7027818a15c3493529eb3be43b0293d7a12ac52f6f81ac5cb8469801dd2df17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-faga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 839911df5eee7c783c483105bb63bae889a776bb393bcf77c80e808af55216cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilo-civasm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 378fe054beefc13793ba277464b9204b5a1d12c9bdbd25806ba6e44c346992a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-olia-tabalauoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 638f059eb52180e391ecb5eff11a1b32cee664320de204ce4dc5457cf48b876d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-fidugafucfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31895d889007f313fd65a71f9d2f57c8432967a51b39e0b211dcb43808561f6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-anmni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06042ae5e81ce13c70f8bc807167a49fd6379ec2388d5b8e64ccf980867192b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-ifaff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4fa3c46bada083cce71e202a60c9413bbdbdb424b6abfbd4bc2195525aff702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gisg1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1552eb8c34c4f3b20aaade8fc8b25211d13be55f2101452766998878853d8db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kin-afuds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e500ac0bb902e6244d5f7bee90f0ed891400e015bc7a9fdec9837985201286d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mugiy-ajoig-daicutaaajk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddab30a7814fa4518f311d92d0cab99674df9ce469a2ca5547cf7b4ab8295660 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irher-aeswasdweaddeassaeeaefeerdaafaadde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f23cac8d047f2bd536304e31ef43094d3e16a8f65ac8d616ab2bd51fad64235b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ubg-atag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5093adcd512b066dc9b1a6b6ff139c73eaee5a43aa7e6375b9f3e8e24b2d37d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avig-ijimamfuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6bcb0f7340ca7f987b39b8818988bdbeb6abe2d7fe5e51088124e3f8e3b6a96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...