MAL-2025-182636 Malicious code in imugiay-avg-dagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f5740f7ee304d05f3c7ae55bb0318034fde2a9447ec74bd3b4939d5cd5e4c66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-luni-huojaiam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7818876a603d327ae9d6510ec3b0d1a4a8d478b05ebffdfe7c0be088d7e5e2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-foi-gisagaan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c539db5704ef8e7763693bacc0563aa4e62a9f9aa4680934af0133690980a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-fagiufagugafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a537d26a3f1602b0d32cd0629586d1858929097fd1dd03ca591b48867e6125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-ugui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a694b6a23032e88b936c554d512f7b213c48c9e69cb95a884264766ee94c970f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-badadivucgafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eb4e0ca1d2312d9443fe207708edc002a34e7a509b8514a7e5a99e2f608c06f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifit-dabtauzai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f146f9d9b58c878ccd462a8ff4596ae93b48ac14e046474fe45627d807a2e52f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitaukailok-don-olasia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af9d31b6b44cd7a6ce31d19da5a708e1969b15df3b09ebc18d3e2096591188cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuig-alakanjitw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08d7f97074b17d7e43a3a09076231c1b7fd094cf18cad5ca2cb6ce1204b16abc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilmo-civa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8f5184a8fbf05d3e4eddf6186271a0e3601c32717b6f71138de06fe5a1481fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-badi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2190990f78d24bab53fdd71fe410e9a57e7f1c8769a6e9e42fa016d13295d56e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilmo-civasavm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae36bf735b691bfcb2cc9f1c00d426e2267f073bb726b8a312c39bf52b1573ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-klvu-ba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 711c5409f46760d3c2026d30bbbf30abdacc801223524e5565cab20263fb6258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-laboka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3580dfe40d979f0daf4fc69c1218fcfca71acaae101fce507ef294b36b45da14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kulig-tgacedcuadopav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dcde3f50a15add27a8e2cede88742122bc6e6201c6542abbefc8f1830b5f59b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oig-mopigafc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e2b1c040ebb9a953443d98531a63825e597bb324cedfed6b5b7b9e6d6d8d9e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kubuskuaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b422a40e06f0b263bcc4348df3c6a6ed30ec3d8331a38ce649a52ae134755b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tnadeaxwqcav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0faef3b152e4bb6e15502fa2da4c8c0368ef90810aa355abfb1c5b5d8260098f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kin-afudsaczubf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21f2696b47c11d67007010ca931e59dcf36f0d773c2497ba51405fdc60583c95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuig-alakanjintew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54bb185fa62f1253e7b43aa8ef6971d875b07b59e32c2f176c8c4142beeaa8ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...