MAL-2025-172807 Malicious code in alvino-58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f9feee5a8c7a8a46b968dae43ee1033ee95da28453a4c97005797f55a4e2323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaoci11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72717a61d671c76b1731da99b13e21951a4ee5b1e4479a2db2a6d22f3544e0de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e765f36d03d623fac50294afe584d31d4437ab350134622a25788905fa4651a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dadre-agajgha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70cc990333585741d73d0629a5af9095110ee1803b22581c376a2ec713482ac4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuragi-sutyu-gaiaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0bced62d39195f68f9e1c202aff119d52896be8dc97ce497d3682c8e9859662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafiun-tfa-fuagif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e13afc9a74c7341b4d206d1555ee41dae1e4d4b6a6ec6fed59c1bd1d82ecab69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satmg-faniufaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 074c20fad5482adec190b5a8bdba03da20f3c57d7978103d4d50b6a157b57bab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafiun-tufja-ina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53e8b9febc1a2403370cc78accd3f9909e5f6debf9d7e244b1f2d8e5bb4b6b59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3db47b915cff01f2d440eee18d3eea2833a76f49ec57690be12247daf751c69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushiya12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23839a60f08396da07b7ed703cdbfad6c8cd456aa1997b46b8b7f875d0ead384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afia-gomagiabafga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3194fb0decf2e3aabe13c0adba266ceaaa8d16a454e67e9dde073732d693adfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gisgsgghab-agagaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e0815909fe53b8a5126ac6e628acbef878d33fd61268004c0f3018ed053f3bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rubiyem-must-buts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a3f3ecea7b575016df89996aa7ccbab483a439e0232dc49d6cdbbaa8496643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dakdre-aodonanfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6751aaf4f705ebfc76b4a90ce3d1468ea414b1c95d1ec2ca361f8916fcfe313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satidafa-fai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb122a5d2350ab2af0c0b224b8a44ed0df53347a4b5e7881885f793b7526479b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-naiman2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63cba003dc344a65e48bb444f58fa2ee81dd000b97759f0fb1a5e21305f75706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in btuis-suinana-mavmva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a4cb13756d12d1d9ef8b5f73ee95d9238ec57f44a148a70cccc818a46f6759a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-nuatapa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a96d3cfd22dad173237e55ee282588b4a5cca5ea2d8d42711bb840cce95f1d9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hds-mafad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65a894d5f1723b48944ed89897d7e7e4827e40de6a6027d53575cd6342870d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tuam-inapupayu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9b22c78d28e8fc425dc4b90b54748910509e0aaacfb4278848355eebb41c7c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...