MAL-2025-182656 Malicious code in imugiay-avg-dudafgacvsigai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 344079ac5b32958f33aa06c802681bb7db93330a36216e182eda392e3c294866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-fusiaffadog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed220a544bef48d81e84a2c43aa28c1cbf9f64bc496e4684bb1250f3c997f7b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avo-ucav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9760f79279f02a8a247b4bf2736c14e30ff6d531f73c618d1eb4835ae1c2501a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fusiaffadog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b3b7104f8420cfe2541e7b9cc03b086b35e52e535eadbd967cd57f0634fd9dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofeki-afgai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63c5dbea89beb0d54ce0ab517ee44517ffdf0195af417778278f05a71a6af561 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvg-dnieamnfaupa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b93999b4fee9a350d349f3be5416709e6fcabfe9fd43c4002a43980f3f1dfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutg-obolavuhiaduli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1799054ab2db9792435aa5fc035a6817ab2a09a834b2e3b3f2dd1578ff1468c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiudt-acog-fag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efd6582792bd4e9b39ccf3bb49ce32f4e25e9214daeae05891188b883087ffa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-fgafav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9a4ee05dc5d114d2ef4f9829e52ae58eb62895672a6efe45c71653474629f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kg-tifffaav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebce8ae7bf78b1c8351dda692279a6da7b6f9b751889430dab8cf158b97cacc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rfrtt4ytr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a49cc91f86cc723ac32e3cf55759ef3411474fefe682f44b95075a948a7bc5de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-and (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c52eb1617f9aac8dde74b596681e4fb6aa36129350313b683e60c8a12ebe01a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilo-cva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e0bc4ba5fa019160de40aa8b58d6cee15e543bb59c4c2c28a0c708fcbd4e4de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olobc-uyg-ugoofifadifuahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e42e182219a4fb7ec7d52c7a1ae11f2eee8a7b9c758ae17d28ead7005c6dc624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-on-lakoikauok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ff175b347e31a04befa512575c1a99705707c1a17f818534a020585e41a9931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifush-ugikobi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acd8b103aeac76898bda653f5d22e72ba5f8ba198c0b365b78126b9b1613830b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifus-ugofaliuafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e49351929bc0abd492df0ebdb9ee16dde5d3b752f4db0c65a89a129612179055 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksgsdfo-ahksgasifsdusdn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421810c901015ebdea82d10b419581d6f67d4035c978b82b42d12285b7f5081b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutag-obolavuhduli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f0a7feacc2c64123d2c5f520183283b5fcb5cce09ec002b5b3f28ed27060c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifush-ugilkfobi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d08ce3213584cf7923640413e4990b70ecde4ba85fb38c9259112b82800815c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...