MAL-2025-169605 Malicious code in uarg-mthai-sufatiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d17a6298b517027534fc4aafdcecd4dc6ae5680661c784fdfc26964f701c98e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-diak-vamiaalam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3e2b47b9ab6e044f7b676dbd5f157dc1600f9dc27bb1b1acec99e83aa168e3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namada-kasito-nuatr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f0742a9e483fc236d2eebb3ac7d38fb8e4b05d1a34f17976fb9b917128f7d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-namiresan50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e52ad13c7fca628b85a609d515494a00cc96cd09f5f96475bb24ec61e7d42717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutus-manis-naudatr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85bc65df1bdd30f0cf112066eb0e4cdcb3c5b298f26c6882fb4f04b5abdc1f3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/aisax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 078872005200292f4cc50ec8814787a3910dc95ac01f512a0cf99f8432b3b959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abyikula-nioybnali-lauybukia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 949ac994e4dcd4af6fbf066730d2a5496087ec4d18bb9aa5b607a4dbf31407df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afgfi-famaonauog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ec0616c8fb92f0a4b0e8e9695f9a06a317d41674828ef1000e0e6483cd88d29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 624a3bb1ad494028c57ec3a75c3f6ae510b13f04af44a2e50f0c664f82fb12f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-amiab-agu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23a4ae49c263115c9aff315516f7bcd2c9f7de562ece682346b51a0ca9512602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nuysata-bunajda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bffaf9da9eee9369d2200eefd9106d05464398765791a7dd7e5945c68eda3f83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nacho-bunian-c (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08deafd3bdbddbf5ce5f5cbc28be6529ef6252661c07dfa1c1742192a4272f6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manttu-nuyatassdfi-muadfiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ce0e954ddda61a75619e42f6362a5499842c7f8bb20460405b712bcf12f82c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-rahfeg-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1976e7438130ba031ae536a262e54a03c7d968aad10212a24c0fa78c9456a5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f91ad5d28685bc71a7ba5eb43172ad0c65d5d14a640bb1e63be3acd2623f9d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44c74ced7e4d188082265639e69f4422d74c07ac8fb2d347eb93043199f5803f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatidra-faradda-nutiraa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e5a817739e3b05519743b1128c7a0f8c0aa050b8d0b4068d8a113361deb4d9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00f4ca521077e593466d3077d517128ab7a6f9bb0b6f131fa2f6cba2dcdc180e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehnah-muio-musrika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f17a72f72e8cad41960f38afbb8ddb2fdd2e7176991de6a5ec80f1a11e8ef736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ajushi57360924 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06706da758ed6496c72c52e1d96953a73d5b1fb2ed2d52fc67b33b73cf984f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...