MAL-2025-182489 Malicious code in imodiov-ofi-cafacevavisvoetmolcabyca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47e862971ab5d3d8e713fe1f5cc76b274f589743d6fe9e5b3d25137f18958a4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-dfg-diwfzcfecdacb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 852a7788c09cf457a5ff92e47f56fe4bd5db435f073b66aaa68634f97635652c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodji-gigafofia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c91460a97e63d833f004b3d8d6b9d306b7dbe715bc3b43211f76a7ca976410eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-daba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e1802b587573b6f642253a25cc6d9fd55d00c4e10503f8f218ae6710a17dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avig-ij (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86d2aba984ce2de5b47a7ae076e2b1602871fa09e630e2bd77df44d92121c26b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutg-oidmo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a1671745c2079ec4163497048c79d60e5ee9d5b1b569ffddc39ca2602d7a49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avig-iayf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84410c5d2207b1efec9125cb3343e392cdec0b2b4581e2f84e18cbfb51c0f5c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuauscdocavgopmoigbl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3381a65895c92970c2afb34c013645552e67edf4afaba3fc315858ce52be965b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-giof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d051a29bd5768995005f44ecc315b2e55f6edcf446866ae3655ea080f8502939 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-afisigafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f9138d2047268c93caa4fa30b9c227bbd22a3c7553c9d524e5b20ae4d605d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ijos-afafiofiahah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 923e8584a2cc29cd5bd381130b002a80151be95eb5901297da20acf91f66f974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dinuhkouhgoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53ca128cefe38eae4ab6a7a1562fd686c134a74a8ee4871aa42e28b1b1401993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bobacn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ea691e570dc70350a16621b044093daac76730427092574f20cd8d7cbd3366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacffgteafsgredcadfacvfeh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccbb286f0f170561c3d03fe41454b785b2eb9c4958470336eabd268c66694b6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knilu-bofavaunuffn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84f9693e0151ecb46b72968e7b4e9224ef14c860e9fc441687e44361f1f27fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olobc-uyg-ugoofifaduahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25336c1c188efad011f084e319b85211ec45c7cb7931478518cde7c44f9ebc3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-koig-tmoerocca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b730a38380470d0274cf3b776baf78fc44ff9791c03e0f9000c4054f34b7cd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olims-nolnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6df6bd416530bc5f3969bc4fb9b432a4b670f5a4c0768ba514001808a617033 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-klvu-babv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfbb1923f0ed588e229f486a648a8471adf42aa461132fefbd438f3c18cdd880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksgsdfo-ahksgasodan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bf529da0892989fff1061845ec9d40d730092e971a05923fc7b09a60ce3837a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...