MAL-2025-173014 Malicious code in anita-butaur-msdagfidsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6967c23d4888f759f2966c05ed2eb1c4569b43c1b35f03ecf8dcab9ccba9602b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afaj-ratofafoafavadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83b7c5121bcb5abdf6e38ff6c7de8279a1ec39e1d857cd6b43114d176634ea3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bafai-sunabi-cumagau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fc7a8148df7f8896fd821d4a9b48e09b059c81a63d80e39d840fefe575d30cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tersui-patrip-muli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a1a037f4a3eca6c0fd80b26a6d0d2314fc025b469bd3fdb2b58d5624a7df1ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaim-liamk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f87b1121e12b50e2d023cd9a9f9260502dd75553cae46fe796a12c7c6ee059f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfi-duiaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26b53e0c8101cfecbd2959f75b0ceb4b43763157dbb36de57dbd189867964585 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc00502944ae22bb63e8d72bd3463622f10c46d601ff3ad6089da5372c1077c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-uloka-jaka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f67f0abf8da464594b0df87ddd490e70c8f45ff9a187f16d4c0df705eb59570a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-idasifa-radaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d45a20b2f64107789e9f66b1631f981322b88d1667a06bc1e7081c5d4a166ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satidaf-favuati (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0cc528cf8aebb9c6aee0c5c728ed03471c3ed7b1c953566ace351b22952944e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549780361b707bbfb17625aafad7dbae268897b388ee3d4727facb2a5703f818 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbona-gadodff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a25a79a9ac2ace18c052575b097087b5e6914f05f0663ee96071bca6ff3850 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1bc23bbe8609981195fb1e22b499c3be53ddc374a22500489e0a2613b70779b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-fafisa-pafasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27e917beb5bb54454ee79986fe64d0162bea8f2ce4df88879fb649a7a00eff1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-geunme-ters (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4175ff7d23afeca515ed08a1a9ab9577760be5d88f9dbaef931636cf2520f17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavam-madivaunav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd68a1b236d4543fdf58d005a5e6091d535f9ba0025959e8d3dc0568fced2a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ef0f20a636fd82ae62e074afe403d2d0a4660a2aa655f21628b40f0cda95e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tauhur-sofi-ditoay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6d4ea1d275053ce457e26227430771db7426a43b803aa25d78ccbab4d2c2f64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-tehh-dsfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3321e947ec4b245aaa2a10754cdfad29363f4cd458c75eb5967f8f863da2570e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0150b3c7b71c39a855f051ff21ceb1658a425f33122d242c522b53cd977ae39a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...