MAL-2025-183144 Malicious code in item-atim-kubusui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b6ef5c8ca17d14ec9ce8f81cb76b35b6e4d4849a2010b80421dc275572b264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uinga-uugucfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c9bef97a49c5762fdaaa911484abdc87dcc1b440273a56ca8bb7bbef95122d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kt-gabf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ac5d3c56cfe862daa57ad24284b0d5390b34915dcb7b97bad1bea73095dbb3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasv-kuu-boafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec12073cd37109c3ac343bca3077f5fb45f137ac3e4e0754e4d28a38be6fd3b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-notu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b924c712f231187d4ce7ffc3b8bf1c42cd0de3721a3d287b6338c09c47839e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irhar-aaeddee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eafa0b56ec4df70f3ade45ed8dee30e7695f56c321fce9f1bd4be0dd5ebe2ee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-kvu-ibuagoufavydauacab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb3e18a40ae923fbe3c49040521b72160640a3310c665ecd6f6a636f04611817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e998631995062a60d2e032580764ee343236c02c28db9e5d94ca950e6bcecb1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oifads-s01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8521995225e5401685e29cc8f4fa7184c6ff1bc94cdcc8fa2137de44c3e33fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubib-gafuyfb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 923f22842c56787224a76dd5e83469d88490e6b22106b6d05d232027af7f0290 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-akif-dak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4857c32a5bd3b949470c99c3240ae9fa3d15dbe26b49470766177863321120dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitokoik-oni-oladis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac88bbccdbeddf60c68bd4570d41b4c27c83399d21fc4f0ce1980e455c0f240f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olioms-nolisfasdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9099ad984076c218a195b5657b2edbc59e8e157ebcf9f6e023bb566f755526c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifit-dabzai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9079b408c8588105c56db9d5b6f660fd8dd844abd6ad448e4620f9c83670e7eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-if-dalik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7027818a15c3493529eb3be43b0293d7a12ac52f6f81ac5cb8469801dd2df17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-uibg-uha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2029ae0d40a4aef830e2ae70332d848284bc8850f514f36dc8f7ab6243198c59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kinu-bobac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8344e78f61193872306260e62e6648fabc0b82ca4615dd652d88424e0595c75f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-avcafivaivcd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 023c64acefe995d2f8caa73122bf613bd9105a6a9a34af48c6d3d556042fff8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-daikila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb054a3059e3b12739b8c71925ef7a4a79afeb64b7cf42dc2a27bf6971d6d4e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-zpojozika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87a91ee02dfb78172eadebec4823ebb2d004f2366bd0d1ca6b60f80cc80831f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...