MAL-2025-183322 Malicious code in libc-ug-agagig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9799d0c8b67dff05ccb6d8b4219cad390a30116d65359683e8241092f5b84bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182069 Malicious code in flights-tuiga-alukauavza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b73ef69cfc83946a30c8cee86118e494423bfc63ec80ed2e88263165df7a8bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilo-civasavuinaum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48cd3a284fc9af45b52359d4a199709b8ed90713987a0338cf89336bbbd530bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kt-gahuvfadufafadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da57976355a45b7c3e3d81f52626f15dc06c3b89be5f226adbefce786c3a1210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-jaufajab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2e915719a8df4400def253efcfc08f058bfd1ac9093b10cf7f589e389001068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imailok-ofe-lanauia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2ba9bfc2c91e12cdf590e85762a5fe4d5bab924e752fad5516c902354b4f854 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bonijavfv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bb6b6d879ba69954e2baa5d58c7ec0e326481f633dc77e5406ad5d075b89ca8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kiunu-bivoyiacab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50bf6009bb8ccf72fff489979fed345708f03c7ab466ecbc228f2910558698ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goiy-ng-gufaguagufaufafci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32a9ededadb62c14a79d88cbce10b434792c1cf044edc5e9e5951b23162c211d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mok-luni-huojakgjim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3be1bdf278d9382d9ed241172d5ea39a673afa073200d84f2ba69d35a9fff957 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufavcseqinsdxaoycuruban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b05e8e6de9f9f146b9aa93408a90a1c8d44e748d7b82561d911d75fd99c71589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olobc-uyg-ugiafaidabaiuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 838b6d0db12800e01fa627ecab46df65ba0a8bb87014a3a89e9d74e9f053f17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olims-nolisfasghdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d74b8cb6c2b8b495768b47df5b789a591e633d060538585cde342e9d11befb53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-luni-huojaim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9824316a7d15211102f6327d6474e93f93860067ba369de72ec3dc1c8e9d08f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-boniv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cc2e6537efcb372df433c82b15487e0f848ba008378fdf03383a21fd0af32bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olioms-nolisfsdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a756e6f297bc8738ecc787a94b85658e732550d12d1bcd2b9ceff95ab95dd52b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dinuhkosuhgoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4681022783bc3962752a4e089b2c879e733b1977a0e1bbc083ee49de35e8768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oib-gis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ddc6c65dee1b85a3729add344226cb2ddad682833ec29d7b4c092844ef57bde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-obis-balla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72ca5e68d08e38f9c84f83a266c521da6dc29225653a963c19c8c1d60b111da6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kaos-fgahgfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2655f7ee67cc735b4e907ddf0c103746c219f5cc83449838e38f1de79ad6bf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...