MAL-2025-163723 Malicious code in nudela-af-gfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7b7f2b96c029853e43a7203d86e9fdbb146c93ecf9441457cf9bbb3612093ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161581 Malicious code in nabuf-otoiman-igaaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1feddde447a46a27014dea0648a558a66a194525dbea098cfda02544cb8b3bf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3929820e8bd2a510e847736d001ec6eb219ff1aa66e0942608d5a609ec27369a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c31147643a78eebfac7a006ac9f261d5ebd155c71a031e252e7f4d02faf5c69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-frauu-ofarfqau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70b44f0fa44a5458a60139a6b07974cf5e53bcbb7a11c9b4eb01ee73412b6ebd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-buyada-buadania (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e02efe0345913bc7e28134148468e530b23c23c5be44de968092aed770fb09e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/iddf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db6241e33e36a4991c09cac056c2493cd72dd5bf8ba12947891bc4456bc59f6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuroichi12-dggs-dfflgh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7733c8803ee79b470452c16788bd0489ad16094f6fdeeddd675dad231f4c0161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d23e87cfccc188d933fe25aebbfa9c1a18f4e7a9fcb0ef2ee2a5b881eabddfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9f01791b52fbe958a129f5c4eea62d467074c43ccdabaa9121a7b3b1f05166f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mans-manapa-manfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd330223e3ee1f9292f4ca94d37ddd72323788d1d91c8adf01df893d39c4d9ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-bbissa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 205b46d6b81831c58d317f96d18ca0ef88db11c9b5fcab8882ffeb88a14e4fe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bbbe5b328ff113f16bca2b9ae5c29bceb294766d5688f78b26394aa57002e4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd416b033225a5d6cd462e19abe9ffd51181238ae9ea030e4af22041577ace5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/asdus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bdee9a3265e5e25f6daeb8dfc83831b8f193881a5d1185fe165d3c87b0e8085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimon-g0aig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e14622f17b58058a0be2513f3537d53a07a3d79536bf13ec52d0859dad9ffb56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagiaas-fimokafiganguaogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b74ae33b4edef6a0db815016725ed83cb38ebadb3b5862dc1cf28fcdff567dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotma-antaz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 360b536a60837b624a22b2a2bb3d1b24330cea3dfd135c33480a8ebacf23a0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efb9399ae4ef6bf0f59e31d5858e8a121c37a8cfba445b9766fb7e05b54eb0aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otgigaf-dajafafifo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90782dfe22c53377a326fb042ce635bbe22abcc0965d9f9eb24bbdd69b385d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...