MAL-2025-182227 Malicious code in gociy-ung-ugaudsfis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9513f7cdd195317b0b2b60cd253198e01253895bc7605dfa9d4f4e924b22e5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggpantekkkktololgujrhyjhbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56da1e4dd5800c3fee5fd84f977b31dffb79eedf4c59c8f66bedb1bae3d592f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ub-afdmafdacafeu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6e174eaa05b7b65e6ed969bc051aa0d8f9b7d7727edb3623214b55d2330175c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuig-alakanjiw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea7b2adbcc7346bb432a536f02ca7adb71a620b60a4a5874d8b0aa445ea61990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kinu-biocuab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6dd5d3d7479c9afe47508366fd892a9ca5517781576d3f5f57cbebac50eb08d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufavcseqinsdxaoycurptvuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bd28b3c45a2dec16188613ba78931b53abdb4e5fd73bf9f0b517f3d0f2880db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olobc-uyg-ugiafaidabaiuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 838b6d0db12800e01fa627ecab46df65ba0a8bb87014a3a89e9d74e9f053f17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-obios-bi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c1e7f26b1e03257b0a9de39250dd26e57309b94a5669863355501c2479a48f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-ku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86b69c3dcc16fdf9ee876642a7dde0e74d202652e098c76bf7f4712eb37dd502 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuiga-alukauavza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b73ef69cfc83946a30c8cee86118e494423bfc63ec80ed2e88263165df7a8bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fakiugaubas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c19247714b45236e9a89363ed8e31131fcdb22953c67db4e633a64b1712150f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-afd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63f05cb3e2527c643e2cd3e95d12b5812045997c0d39eb6ec36fe1b5eb4b8fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufbaceuiacfofjox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4071ee885db2d4718df9c4fa792d5d2125823638f33a44b0b9dfd8600f20c3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oib-gis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ddc6c65dee1b85a3729add344226cb2ddad682833ec29d7b4c092844ef57bde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tifuacfivaacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f5c4d31880314a32316fe644bddd2e6e2b4b5bc291168b5c03a29f35db1c410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-uhitaggaafadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f64ead1f29a7a857fcb190e9618706ca4506f262ebd7f691743bd16710f018fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuwabimagvl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6fa67e9c883ea8ccc10647d7f1646351355c60c68f495ea18e1894ac93703e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-afnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31320a9dcff1b51f545c46e683497a3b2e713e497c991afc2afd170e6f12bf93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-adfio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 788b2b1105ad14f51e61a532e89f46d3666518bc9ea1f8c014465c87b099b7fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiudt-acavog-fafifug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7ee67a15555df67663f69c7cc5e7828f83d7ea6f9853936bae01977f65f4b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...