MAL-2025-177108 Malicious code in nuyar-amair-tabigaffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1a7ec6c8efe86ecd55a5a43e8ca0dde08be0df627c6285bc4d9a5f142fc3322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaisoim-oloska (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4247d9ca7b4271fa582b7117b3f488c5be03ac6fd1aafb384c7262d5abce367e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbobna-gaddafaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede2734b0b1b09b504f9729f517fd3df3fb919c948a8a90b2d17bedafe0265b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a7f0de4a594431a449fe1e8c2ec5dbfda1b72ad791130a2f2f0c98c788340c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimi-satu-angifafafiug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1347756efd2387b523e24d40d195c2f854a7a876fb2d5018f97b971e2190b6f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adudar-baidaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b14c42c5c025f0a90e4a441ceb8be3cdb4202ba6e5fdd6d871e96dedd9a6dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abeeh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffb87fe0b1d48cbdf48bb27cb580473b30915548dc90bdf4662768d7ccb33bcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godiatai-tufam-iubata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef2e82251fe80302eece89ffa0d87d59b063fc95716339e3faa8b865c1ab5906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aaabdi-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 609a5e733805bc24d9a21c4278251983e46a45ee444adeeede671dc444ab52d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-faffsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12576bf4e46353e9b69d015bac21293a7abf2170710edf32d5f00686e9b3b923 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimiabai-satib-nbb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b077d06a440f3d04e337c7a83d22779ed00d22268b08d1a8a1dd6d03ae8ac92e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satg-faniuaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44dd20e339754cec1b2b3cd65d4b0e14abdbe26e8d082d88bb417409a1643b35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-saufdaggafoi-ugha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d3ea035a7fe69a9f54d4e5e21e383658676c9c241c4ec2afa8189dda0a4ffbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avonnf-abma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2753f32ad9672142f09d8eefc8411a34e4dbd4fecd67e4fd82c00e811e446855 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-sunina-mubanava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb1c719f5671c73d88f9724a855f0e802363d82c1c9df1869f122c3a2a59ee3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rusdi-set-rusma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52812fc8ca8026b5fab2c3f1181241589461071f48a7b5d5f4418ee474de8cc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mufaafgi-sufuafi-cagasufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532de853dfbf582529d2638c1eb5819d3e36a4bbeea8855e81c89aafcba7e57d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapio-samunu-maivcavma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 033cc4198dd657418a5ba666550f9ba6914a9813de6ff8d2455f137bd3f32266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in annneh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1766a954fae5723d94fc5416a3a8848e8abc1c5275bc03cc607e1787d97fe0bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fs0boiuna-gaafioif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49e377be5205d7f558101bbba2246498efa7e6a929ea127d3d781c17fb712642 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...