MAL-2025-173511 Malicious code in butah-asfui-daajufahaguf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04d6b06a623e9f8ec4f462abdc709d69b07830f27a4c9a6904ca37d47b1b10a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaka-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b51054027f0b6dc8db9871991ffa2887e64e18cf17a2f53b2a8372688b969e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah1-miftah30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 216df00895be2d4acaac0515ed998f37144341e9cac5e371a8860a38af7290e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da596aaae81497d9a7546255ebfa2126c2b885dc836e8abd48c7a02b88b7735b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banib-imuabuamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a8cf9423b5c4b312e0c19a6905b6b71a94462a150f1f567b1c316bdf4778631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manis-mioapagfiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1fc7d14439ce4f929a7fe1686023804e821fb7fedeb5266ce51904fb1bd4b02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushina12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e55e878625ba3f5c5391c297b2d12e3cc0c2c7e6a68a6e303890fc061156f29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kim-sohy-memeq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7523cda774adc0862a3abb4fe918ed771316723a4f52d48148289f91e53a95c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avof-agiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efb8d087d3d9ba96a0e9f51bc8bf0a1cf9403d79a97c94b8629e9291123cb03d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2ab45489eef1ae72fe75f69b6c13e346f7c55dd4dfcf5b17b2a072f1bcd35ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-da-raatao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91c64de3e02013143a974393162b86c070004a7aec91eab21690b199e343b7b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kulaka-jokiohakasikimalo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 741f86959fb421e9ca8e53caa9dcc06dfd984674c27f5b5b0fc428d3299a2c0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimi-satihu-anagiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64fe6a3d2b87023ed82fbf3e0a8c21ff6ec761dabb0f8c677e9a44b489a4b540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tufufaja-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 021aa3912bd0fa70801e0f9b45387589c71b89c31e3863946ed44cd506b777f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapino-samunvu-mucdivdabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9211b373e1c4f4728d80b19f3e74bfa6c0d76fb30ff0cfca44bd1f7b2130b383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teadod-mipta16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe16db548400338fce2eb2ce461026c0087a604b82ef504e1128e493f99800a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-ogofigadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d23daf81a55c6ab1142c54c9b96ff76069cbf920d9961ff2eba858491ce323cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banbo-imanumabai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 668e6cc1443901facbd425e92f42acb100785af113222373f5b53e9567971ff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satug-iggai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c453aa0ee40c37e302f53fe89f301c5df6611c685efc07aa282d74d8b20f33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rintono-poke85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7f48e21d2a69aed23d5bbef62120a4235aa80ac163cecce988835c405eecf88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...