MAL-2025-186160 Malicious code in class-kernel-lambda-void-try (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f07d1b6f4250bc7debfa02f88d961108d6e01a100297ae64122870d4c9302a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifuni-ufbaceuiacfovadfhjodmux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1bf1c392b7d6f1b99604f37791fccdb16096401e4dee04a731928a478bbf8fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-jfga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7daa846c4290a4ad13294f14edd560bd708b92df05f61e05c3bec450e4fe3811 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-icfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1828c8f3887e4d9dfbfca8eda7c3c89cd20bb9e31cb5034d43bf4006a79352b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uinaga-ugugfagafucfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a6e7f2865861e5bd7b5e33eb79c3fef937f3294d082ffefb6b30f603839786f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-ssfres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29dae9d62376035746c8b57804f56d26d5626ec2c4ceb05cfd29da01ec89af9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-jos-aafia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf93ad103a765f619a5d787d008a6c1d3c171a33b553a2078e8f72439f43662b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-akontolbapakmfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91b823a9978fc24e7cdced02302ea5d983e0f0d4d257360a549bd22d2a34b285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-koifi-cuidcavuaompmg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c1f42d94351c018d6b19c27a84465fc969b212d4441d0a019842f7fd8140c9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labieoka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b080c8a6352d1152a4dce40617d2a1fdd339bd7863fd683a647aa7630d1b21f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gisosauug1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cda892b21aec235d841c708beb729dc15a247829d46d0cdda8f1c686eb4eef81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-diav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f85fc7b145adfd18c16f321764f711ed3fddf281d57e9dc40eadad7962bf5a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ug-atafufiaafaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77068e34e94237a64b817e5c84cbff2d167e2e865d515f7d41fcf615cc3d0a68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-hykaulaygkusaytang (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74bbbe2a26043a49e6923ed5378dc6678ad5713aba3ad9a0d527e7198c3b9bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kulig-tgacv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d05eaceeff54a24474b1ac0b324b1cdb70c2444eba0a31af22329648b3af0c87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-guga-viguvfuagudivai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc54852893fbab3d935ac8923d01bb52877f963df369eb5934afdfe3e0539fd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-alai-ava0bu0ku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 353a316dc441980c5569c15932f734a7ccbb111dd36fdf145cf734efb79545ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ug-atafuifiaafaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2754226febfbe72f3b3f8d03a73ce426b070c7a4035ee8ba8d1b7aaaf7028202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90863871202809f863e22fcff6fafde6e0d34a59b688294784c84ff57f7e4333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-inlutag-idulaisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5120063417d75f7685024f4b5723691e09a87a115228feef73fb6c691f091d0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...