MAL-2025-166235 Malicious code in sund-uyilu-vanmiun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eccefcee44d32c5ed4aa9327c8ac940b7237103d6effc5f14e890dcf70202ef4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabia-aligumafi-agoubva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4253ad6bfd812fad6921c793222810f54d7134fe00fe19403e8e6390ed4d9d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-manar-nabsfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f280391d9b5fd08b34dee542c098a277e6dcc451bcde4ee2c7cc2701be910d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kuli-luaauavuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bba39f6ac9a832f2405ac9a933328db8b31623fcfc2c8976034297aa7014d00b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansida-nomfdi-mungu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daed987231af326a5ee253d630ac61ffbae01868e024fbd5aa089488cc7da7b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5a4c5fda288a42df270c080d32a1b0c5f8356cfe149fabf94dc45f338a874f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/xsdsoopa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c45d0172a225ad4baa3d4b5f1919afb7f13085c0df02d247d193f89dfff75ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be11ae8a200c96cdaf0c54ddfb6731714b136d0a46f124d872c6830032fa3a9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igamino-jimgugu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea1e5ceccefad3485ca4748d8e3375565762866a0547e1ce51fd10eb9bc1b042 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arhani39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c2dc53c179e06b023a91787b14c137adfd590661c7d84fc15f2425bccd88552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagmas-adigfhagaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66f78c635381cc560fedeb943287f969a480b39dcd67c28187857dfe2e45decc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 582213c32d39b929a886394090481a310339b0f581ba2df07d5a279edd3307a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ee859023c690a9f290bb29fe28e46024415c33f8bf2b008c877974b36b11540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-aigoamoa-iuafafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afcd66982a5b441c4e87fc682272a1327544807846d7615bf28d0477fcc29878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namadata-munaroha-mufafnaisfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06f18a588fe50114a026c420b4a46a574d9f9e5504b2efd826c93d9c3d3f4e44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-mioliupe- (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3116301ab8f4e1efe6c3e3baf541c4d6c225b323a7cdf657cbc9bdd722729f51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losiat-dilaubaukabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05146a01c25df318b8628860df7f1331a40ed389bf585d9ac89c45d45e17cad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/tkd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f856e445190708cff843a58301b7407a401aeccf5b5f96caf8676f81c3ff0d7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namase-mewekaty-baukmwmek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f8dc1a70c0faa65a35cbefb7032bb871f3f3a6018468a42047238d4384e3a01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iqbal-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbe587faefe2b95e93a600d9ae95b73b51f6ca9e5a258d13f98a1138eb8e81a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...