MAL-2025-181800 Malicious code in avangs-olim-anami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc86d8fbcd6b6ad9c894abfa5c9a4b2bdaaf1a2d6053fb18fbe6db10dc326bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-fudvitifyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 811eb04f5c296af8d0775c0287aa1c35e7a9ac2bc0940df219cd502dfa0aefbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irher-aeswasdweaddeassaedeaefedeadedefredafafaadde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60204f96f22f6598891bdd615d6d258a4d6e6e06b1e11b4ddea55d6e7add369a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oig-mopigafc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e2b1c040ebb9a953443d98531a63825e597bb324cedfed6b5b7b9e6d6d8d9e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-khan-avcafivaivuvacd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff302f2f2037bf181e54559dbe7655a5fc32356521d49e238da58eace14fb59f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-uhitaggafadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f2928dd2e441f6e124ac61cd608ce2e044c4fb26cd6b32daea874923a9819e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irhar-aadde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28b4e64fa88c0f2a682ab7e9f5109f2ddca96eccb8dfb9c44b0fe04244caffe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fangaiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f623daa056305bb38d461108028817cbcaf149825d7f3628267459ea6d8b5a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitouko-on-lakoikauak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c007b5aa0b16ad9b4310ef45a271b637fe00f53b76a0627759bfed02ea40d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indexa-fotadio-agv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcb4216539e13a09d1709a2e34829864a8b332e2f27999e4f77690dfd01ee9bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olimois-nolianu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6201f93fec0b8441f49dd599914c281782bb8ed08111847f6cda7124eeaf31de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avig-iayafuarfuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e1ccca409c3ed42278e2bb3e3a2b16d22336334d3b005848a518cbe4320c240 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bobacon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3592e0d1ff2dd2a7528acd95c5d2d35a70e221a6684afe9704ebf9e7f30b8159 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifush-ugofalif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da2ce94dbd3750bef2e20d54e2000f522c2a1646f7d26202e6348a5d1a17f7f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-kubsiduzika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb2ee9b474ef56b2b57e4202f75f54df2add22513d910fc2d28206832193e66e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacffgteafsgredcadf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 516f537aceec6c23deab6bea2b65ef7cef2529420b1fcf10c1693854850e714d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-ugaoyugixechafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac43a4aa6b5124cdeee09f2119f270a7b26e05b57391a50cb06f03560005d4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ots-uyaidoagib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e762cd9d8c7694d79e9970d1697694085059e2df3bb8b57c31be5949b37ca5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oc-gua-vsjfahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e62869c92f484eec09e6f5a960f3fb7758eec535bea1acf55475d8b2222d7299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihon-afbaufcags (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8300b0451a3ccb3e98fca4509598c5bf40d664a3bc0bcb88901847a811a0154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...