MAL-2025-187348 Malicious code in hermes-version-mdx-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5006ef0eabe6994dd52d5fe0f9aabf541ce2dfe591b583436dca8eeb42495bf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resonance-middleware-octans-graviton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9970ca8ef6e7f17379376bad34acd43e416abc3403acca977d152258ab4811af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuloig-time (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55d2489cf2ea70025c4d58e820b2ccf6a6f49a4453098f975e993cbe78e57901 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ubg-atafufaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0d5bb5180013553d541c1cf34abb0b6cd3047f3175bba6ed78b10f4b870c801 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufbn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81a22226724a2fea227f6ca6a3f1480081b4635137e6c19cc0a97c74ba7a787a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-avg-daiugadajuj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53fab6ad8ecbf754203c6e6e5c307d3530a90d572221c6c5354e0b8b2c0203e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutg-idaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 964f11d81ca795dfaff6343ce2818b0cc22dc2d230a6e62fabd10874586b6e8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-doni-olodagivils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41170279a0132a6dc590c3e9959658e45d9bbf432027ecac9babc3c8ecd121f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-dfg-dufaiban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bb34fb48320ba52b872cebf586c29fafa87d37b4a9f0c3769996d335cac3def This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociy-ung-ugafugag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17491f29bb5e2a4c51ccb1ff4c0869794cff68ea26a1f22b377f0fd27d3919b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-ilo-cvaihu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f48df2be2770abc2c0d65f2b250ca333e81da77b4016490ef8b1f84047acb1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilo-civasaum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c3edd09bdba60d5c255c04c932c91fb20e0913a0e5131c58da09314fb64c844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-don-oliksima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d143737a294dd27bad8cb7779a6788e941c8e753a4138d2b71efddd6c0f2d235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kujaulahubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72a30bc68f372e5170f6966a3a847107ab68b8a023b8b584e0c02f74cc5caa96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodj-guofipa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba4af3582761663277689312c3073408897767d94b09a2faede41d8fb8cb050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kuvu-bau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3865280f14ef168d773eb58848523039e8e2490ddaf069998c52e795bb516ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-afisigafaafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b957bb54e50e683488f27387e494f4373f6997ef33f42c5a2164012b3d2ce19e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-aceqa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c8da4a8ca46b3377644165879ebbac3205501799b59f904b580b489f9f71764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-ung-fugugaicagiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5557e429334ebffbd61a2f9be162cb4c79311caa44870f355fa7a42016a7d2fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in asta-alif-dak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f4e97b7bddf1e5d66fedf8a97d6a681c4c708bbe21e5b0432cc0a63d27ec8c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...