MAL-2025-176728 Malicious code in nuilva-buyavadia-manahayav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebb3e64c2494fc21cc3d937f68b0f2c6ece9ca4646169b8faafcad5a56859166 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e485095ad6e8a5c37eca76b5d29d244c583184e5e92734588bc4aff9271f183a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-nusiua-nui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb2d3d90438f5401f9aa731a3653bba8f12e6238f0179370241dcce318d36fa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf86d73b336741055705983a06dbbcc4c98bf649734a6b9815818b6de41cc1b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-gaguaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d45c4b67bc142c6f4be48d8ad4d39f4127dcf98372abd505d5eb02683660474b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hakim-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f17ed18e7793f6766777cdfda27d88bc4d04f100fc07b03adcb5867d2429da3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70cf78672fde4b2380d32485523fae268a0994cde92f1604b1fb4c3cb7310f99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-godfogf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 579c2b6cfbca1649dcb1794e8207fa408562c7f1b41b8790c09e434b766f396c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-derty-ert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7119581c8cb653b5a27c79c6fee37837ea3ac4dd12365a6a68132eae41141aad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0150b3c7b71c39a855f051ff21ceb1658a425f33122d242c522b53cd977ae39a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afrrrrri-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cf7e68af979dbf67861ca20084ac5322a48469b3623c4227cdc30c60166d161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adadar-bit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a705103e7e62e936e56296fedb9fb95fc3da652573a3a255dd1c94554b0e35ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-farsamvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea34f114573fd81529fb127a2bee057b1a28f1b6dc3c97f7d3ec9855cce54560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-sunina-muabn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9627f04b08e21173399f5083673d821330fb2759fd5d55c254f32bd5e9a69d51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rintono-poke89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1da52e4994b4ebc42960716455dfd3a84ee60e1ad05b2901b2c228f4ee7dc13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dare-ogogadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4044b7bb980e0da5239e56dcedae7c8db653f5320f65d7cbd6f94d3b91e5f86e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-buia-manahayav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b882908ae21b8c452b0ee7790c31ee2d7002d665c55764a4f638fc614152927b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaoci5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 426157b02f97f1d5957632904c226e5fe63f26142f598d4ed5a9774b439b429f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofagfgdi-ugha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1de0d502679b3499c94e0e6360a91508eb2c014b8e4d12b069d7ed491f359d6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mibasah-minuynfas-msidnsas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ed55cc464d8f35c2692b94daefe2f7c4e782af9a7f6c74635288dae23cf0b7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...