MAL-2025-171731 Malicious code in putrawijaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46e7f5dbdfad044beefd121f9671f1bc47429cf22ced23f4e1959b56c4764a45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 841fbdf12aa2e425a9b6d59e88707de5f186a70c2f4800600b0c2ce3f5a760be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otigangaf-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aef827485d422110314f93fd90b7dd09f752ca48a5f603019a2aa720e04f5cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa471e5a54a351be2f9471640d90aafeb53d317765227fad51573989f840e342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9224c8177cac4e12e6b559806ff6eb760f8807ae471a6a82274b545c63014112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-moilope-araunsuiogo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1edaf458817ff9bfbd875fe7ffa73efaafde10a96c58d6e1c57d90410a889d8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-dpas-tac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d1ed0730243555b1db305f68bf602cd630c0948bd6b4d230b87b9732951e9a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimon-g0afigg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 588414fedf0a956e18e6687efbfed3a8bd714f705d9ad343162d79646d8af067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kulpo-kaipsno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1382d1ff64f0de994b313763dc5c496ecce220d9cab8589b6334400624c9cb38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-aiga-ifu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdd974d9e49ea498b87cfc41f393982097160e9a8a3a38c4df42241a8f2733e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2cb750211526ef616373b0b84b30bf8de5596243f66ce0d561842b9e2c5ea3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lkui-kunammuib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9a9176f8a6c275d3813388035fd3bf0c64ea6ec3b73d7e656a40d10eba6d30d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-alabokio-moajikaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd10e1f2129512df51a108030ad1696dc4f1ca746b8ce38df8edb15367fd522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uafagarug-midefa-fatusut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d8aeaf98de0a59d1b262cca504bbad534034705230dfbf5dabc3907ee63f701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28528fb8796ad9e990a1c3191a89ac0b4025525762289760ca8afe2530457170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/nitroteh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4da8b74def3fd2fbd057f82de8d519ab812495c31709643acb99fa4db6e617a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/qnisdayua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c5cf1f7776fd39f0891df407e039fa188ee73fdb75c6c59c5370e0bfc03e32f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anaisisulah-paufai-asu9aia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c73ca43685b60fd07ca27c573309e18b8a46eaac7bf15a856928dcdba25431f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f189c483e88996de60d4a028ed3ffccb4ba68b67331cf2cf0c2ebd205ab7661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8779776dfd7e86989a08eabfed8fc334606a422ddc419b565815244f29f19235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...