MAL-2025-171130 Malicious code in eclipsevoyager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52b4b3d9ec4d7c1c71ad0be245964e791f240e70c5261917c23079404905f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagimas-ofisuogafag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c79f58a5de1943c02ab3b84f06a436b10859ac8f592c8f5130772f10225b4541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-murasaf-mant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9968411e5face8b7f5648fcc45bbbd0a34395558d7c9bac39f0d6b3e6839589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lisa-atunma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3d3f6543f147b3cf90024ced16d5829c434edc7c90ea7fdee88f5f035854298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec088bf5091e555d542897205341b35fc398ae9a949a12708ad473a47fa5735d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-adaea-dssd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee0935dd6500c83cccddada9a0c1ce959c4a302e23c838e71b580d20964952f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/nda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e169020143720ac074c55a1a88ce9415322048fb839f52d2878d6e9d6f95107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iomodra-fuoa-jafuliafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fef930aea972f4e6082d151f878af67e7699d58958de4e0cce2ae6609a51935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uarug-mitaiuhai-sufeua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e69dac3a136f3e001c7a988df6e645ae038853d8af12f61c64179130b88a2fa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pil-aku-kin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3806095e217cde95ed4d5a9aa856af85f62bedda2d4730be67a942437a5e4fab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3344de29088a7882ee60805f6ef25d69269ffc07555fd65c4aed04da03ca9047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toyota-cir12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3cb50aaf2920ed65a812c92dcc054b5fc5ee8ac69de31be2b312440f17faa69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in azhar-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fcb3ce664487c8a9914e358facc756e057619d52d336eec911534d5b8e35881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butrsui-muiko-mutyooa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0792623affa23f58116447a54d31129110e3b2ede7f0fa3586bb207286b1bfa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48ef53c3449b8f7a49a020da788bb2d1bc69f8e3157de404f059e127a481f2ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-magfu-gomuamia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4365a420bd5239839a42c5de9fa9943d195f5ce1e158bb8dea2b7d8bbba3d029 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7c786bf399fde2a23d53fa81342e322dabb5aca9410e7b2cbff43719cd7ac57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke116 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9281938a6e517336712d7af1e705009c67dc3664540b5623fa8599cf334f646 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dc040509cc77fafd9bb311d763195477bf0bd616c266c0613138865848b3e65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-ntai-yoadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96f08f5b31fe05b3c9bd81f491283c665ad90d95fff7303675be371df2d79d67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...