MAL-2025-185173 Malicious code in sonic-oig-mopigafifc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 783c93443951833d05e3744db18ee7c67ea409163feb5f3cbfc1ff5b9282ad9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutg-od (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e47db5b277a7baf757288c1e3743b38d5e56c72e5b52f72e37fc1c7d0f822b13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifukilit-dakiula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bd8b78f283b6ddbae0504cf3e37b6b2256ec65ac8ead828664d110154a925d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-klvu-ba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 711c5409f46760d3c2026d30bbbf30abdacc801223524e5565cab20263fb6258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-nofity-gam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5272ba7013a3a976f41ede99c7368a4d03ec098c817baed9f5202d5273a29909 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dn-ujokula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46154db83c473ee84ceddfa058721bf4b7466b3f68f2fb1599c1b61a6824ed60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggmatondanggantgyru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebba633d1e62e83180d0f52898dee82ba7f83f013cea6be5ec4067e58b1a2d09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-uibg-abuae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2ed074e3a84d63f7b2d12d31e92df1bd3caf81d230d3843bedc2e832ecc773d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-luni-hujaim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e90e62a88969c75706ca194eea3c109a9eff185860348724c02902c74909e7e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaz-alai-yuavku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a524f9474ef058ea8eb7c86a6a511f070513cc0478a3ace592094d5c1bde35aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-akontolbapakmuulolotlrtjygfsri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86efa15efda558074b0f2b2fd064f3c0bc9adf03580d9149da9d064486e088df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ks-fuja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 996b469a65fc376f41c23dd2b9185027fef2ac56c29008fc0a33bf7e71094c3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ub-badadivudcuagafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71297f559215f8dbd56f9ff77d39bad38c3f1419c17e4f8f8c3968400d741792 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unise-kiat-bida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 799c4dd38a502e4a3e432412686e407a46d3a46b1fcf894b194dfaddc7679351 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kidt-avog-uvuffacfeaaifv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86b8563af92242dedd4c15dcf6912f28f119c6da3fe999eba0607c030555183b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acseqaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f3b99d0469be20c6bdc720009eb1f6e3af13a0940e7a11b3c6aaadc06b61371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaz-ala-yulau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e57e94da2c6e54c48acd27d7100a627424afd1180c2a92fa3504aac92aa5c551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kit-gahufaduuvufadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b5fb5b09142f885c187bae1379934319bb6d854d593af626f4fd97dd738b7f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-gab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f53c003c016d5a91c9cee42f7211faef58951706c3ec9a6df8cfac3e9afd5f64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kt-gabisagf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a038f6b79b997d6bf927071b14ee28bdaf770b328cbcd8cf23dc0acf0aa815d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...