MAL-2025-176898 Malicious code in nuragi-sutaufia-dgug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0ca6701a91d587a156c60df091af691eb98eedd2ead548e1dc4af814879302b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-ida-rada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20df5c83458ef2e9f72c4f4150aa311c3d3986317458573ce5b86279b6aed883 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahun-satud-fador (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7827c6bff514af8fb11a7fccc663e7651d676fc774de98e443ce91a518bb4e31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavia-icavib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 561cae21e70c6196577eb61b244134f9a3b554d4fd456be1ca4248d81002e277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-maba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9793f6e1b04ac73449c530a401f840f1b8c010487fce0c7f38b77df440daa14e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mufaafgi-sufuafi-cagasufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532de853dfbf582529d2638c1eb5819d3e36a4bbeea8855e81c89aafcba7e57d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiyaa-sutiayanu-gandofi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4d7967de0e5d42dc44d53f42174283a413f20edc99b4be625fae38b3e1120bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimi-satihu-angafaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c7da81e63f2f014bcd3667646ae2a2f4e113897dedbad262032d7f1b70b48f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mufafi-sufuafi-cagasufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84237dd132b471afeea314ed8daf3365ebd2aae3dd8131c9a73fc8647acd3f97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-agdagg-aahai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8484e6f2d74fa69ac17a96213a907a56a073d94067f49ae7228831593f1e439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvnvi-bofafanifavvu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51173918a99f29385597bf8a2ea5f7dc6a8f6ab3e6f86e22acbdd3320dbb99db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghh-faf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45ed6527df21401d710e4922c3f48b3944e90a3a2c8a09bbd13999895328ed00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tearich-ralat8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ec5e052f6e6a8aa26a735f0fe85e82b79debf01b612fa99e1bf4092257f1e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suninana-manaado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc375e0e00dc268fc6a9d20a9d6a010c822086482615d3357529b51ea7ebb5d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiyag-giftu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2dae9cf934f1352257a06a752dbfb8a0e326b5eb2c45bdcdcab4f310e07012a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-sautuga-infaruduita (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79dac217a187a5cdfc08f3cdbf25cdf776771ed08d406241c47ba616ca8d3d0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagh-amifn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3285d81712b7eac184581659465b362fb5489395b8e123a02fa571bb512efb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adudar-baidayat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f5fd20446b6e2accd26746e92c5c53f08fea5f5f446837efe7a1692a4e21307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanufahuir-sofai-dugufat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685a83ca8118d2d11d566ccf24914c9f2a48bf4102c97c3344fdbcc7a1d4af2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfia-dafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d34cfbbed0d596eb7423edeed8830c288d06fb6240b2ee5ed79ec7fb7f14d7a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...