MAL-2025-183617 Malicious code in lomi-ifush-ugofalifu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff4d7bc7f0bcf5a4d34260946823466347c2d1312d4b8f8932c0f36cd896dc39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufbaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd32727c34463213d57af8b0e289db4315befa3580c526d9905b6c5b9103df17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irhar-aaesdeadeadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5afad523c4a98a45648bf6a95e3fbde47d2deb71aa75ab09cb025b5862ee218c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggmatondnggnru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fe8461b0744d15d5142e3448f095df0db23bd954f8a9f278c6f68db0b7c2479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-obios-bimabaogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e236ddf6fd429cd697da8a52d23501e9131a17fe3b74f0f861a3068ceb80485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-omfi-cafacevavisvoea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6fd440dd5b06670999e260fe000b83e05c5f9e1498971c921abda151cfe3cd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacffgteafgrcaavfhaebfac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ef10b2ae19d8cb011b0b774a4c79d22c611e629cb1944746bc7bd1b457918a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofki-afunagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b10c9a6b50f1b5346a3fea9e2bd248b71244419a5d9c1e3f300225298408f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uga-agidugai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3945f1602f50098527c16f9da5b6ed99ee65e0c906e9718c0da407fc41ffde44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggryuyegfjbsgbajtrnnetefbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffda16f2a9fcd4149fef13eb93769c70e0247d581e95e97bfcfd21b3eb3f7226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oliobc-uyg-ugh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ccc800c113455b9612763849b50994783678c6853c96af141c07b91d365c86d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kubuskiumabika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10062d9d3525f4697a1feef5cb54f6cdc1e9f3c339c11130cfda40ba17228da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kidt-avog-uufcav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 371f9f78f4e93187ce23621d34d53b3a13479b6d20e6fbc140392fee22e36109 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-hykaulag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ad5a181dc589aff2da74c85c73ec6699e767b0dfffe58e226ee7dc30dd61d9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-yg-uti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad297d01c85dcf88cf00d8a2120c0e31a17046e1d1c36088b184406c11ae8d8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fgfao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23f975b27efc7d6f1959d48dae7b878c892e05ddcf8730d116c5b62b3a18821b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fangaiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f623daa056305bb38d461108028817cbcaf149825d7f3628267459ea6d8b5a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-jygwuywuyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8caff64a8f6f6627af47b658da3b2a0d5e48a8abb1ec42c9d5658048e3c3f09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kidt-aog-uvuffacfeaaifaafiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eb37d1709808179e81f6b18333680b8928d89af94b7f68aa57df6691918e6a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indexa-fotadio-agv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcb4216539e13a09d1709a2e34829864a8b332e2f27999e4f77690dfd01ee9bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...