MAL-2025-185234 Malicious code in soniec-kat-favr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af7858c82682c285822b8bd8fea2bc14400481b3d649ff1853cbc2ed6d31befe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182712 Malicious code in inda-fodji-gfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ee9ead9ca927648d3fa916f88e36cc25348e0de81b30a8ae72ce27b731abeec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofeki-afahikuanaugai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bf6929e7bc03287d74686b0bb8f0df2e7cc90c861ddc2a516f2710e6b8da008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bonijavuficuadcfvaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e95f787eb41af8583d91004bac9d809547aae1e5324844156f6944484e88ecce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labieagyeoka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b86124a8d348a345cdc37b4cb3d8d3eea532116e20025a55657903c92154fef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-komfi-cafegxadad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d47998599da8a67bf866de1cd804d8298c5f032d07cbca011bf79d5f3eb6efc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubg-abe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08418f53fe276a66cf5e9969053f85c533fb8370433749ab18c8c21bcbc1f734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-agig-iyucauaugafg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec5110549c90735003ccf89029f171fe9c000e134c5167da507d77e55aa285b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dn-olikiakmua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36cfad99d24b0cdbd85d9b5afe158478c775407a096f2a48478915f7f42a4df2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mokok-lukani-huj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c03705a9767ffb984bb7a42a54a4a5af854f2b70e6638b380490080af290c324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilimo-civufavicasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31509ff088637429685bd189a2823d92535c97ddc80675efabfc95e318c12efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avo-cbv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddb20b60fb713ee3115c1d309201c1ce1fffc3e617cd4769533dcc8afd24f33c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knilu-bofavaunuffn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84f9693e0151ecb46b72968e7b4e9224ef14c860e9fc441687e44361f1f27fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olims-nolnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6df6bd416530bc5f3969bc4fb9b432a4b670f5a4c0768ba514001808a617033 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-uga-agyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87d9110529eb41dae7de9a3874d20e8a89e54cf6db9a42e0733065d5ea76fc51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kat-iadagh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 970ce17e3ee4074fdeb15e394625ae5c9208cf2c5ce9f3c867102b4707623093 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodija-gifobaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58f64cafcdd09aac8c6c9cee3fb59d278a0f457583e82f83f953eeb3a8e171f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-kvu-ibaibuacamuva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector badda2c6a7806226994f65eff75d9cd1a4c482208e31c8f32a59733625ec5fb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olobc-uyg-ugoofifaduahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25336c1c188efad011f084e319b85211ec45c7cb7931478518cde7c44f9ebc3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitk-oni-oladiaps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33cedc3d07f75d3778757217f59484e4deeb5b7331928505555ebea31d1addfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...