MAL-2025-175455 Malicious code in kapvino-sovni-gbfafgafaisi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f428ca492bc6872dbf14ad1f5b06f7006e2739d71631b055fa0c7cfd71b4800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuig-gibafgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6a811cb7be5359cc367037c55d768360f2238f6281cbeac6f42e30864a96b0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anaaaaa-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b79c895dc0b338750b4ed2b2874871c3aac62fb04e0ff9451275e94ae68330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimana-satgub-naiunab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f99213f89baf466b89d09bb002fd30e289934ee1653d71d0a8c6e703e5b480c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manuidais-btyad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f97fcbfbe6452703e5f03a86aaa60dc6a82eabfbfb1f8e7fc23d21d0907708f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abdii-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c632eb16a49e0936696f509f31bc1b8ce5ddbb6e39a625c5c2eba0005becf8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in btuis-suinana-vmva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba19367cc433f9ce84094e7a3dae024498dc5ec2784e35bc2e54c06259aba6cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-faina-igaigna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775c8730c458c4758493cca40185f4fc5dd25d3325c752a2cbfc4a8e3562dddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afia-goafga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 278144f5242cb2646164ed63a8ae9d4cef40edcda53a84863d3ffea20b43964a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divaa-tugai-imibafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0dad7a8849553b8c09e26646c1535863cb0b4ecff01523a9c42516c4ff45d17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rrramadan-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ab5acf0077ceb9071bdcb2f366394909c6700c9d61cfbeaa7809330a5fd8b5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimi-satihu-angafagfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbd172eb88049ffb9578e99880419b2fa5aa93841f1d693d43eff21ec3c7dd02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaisoim-olosdssgnika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48082722e83bbab61246e412816dc1cd98dfd49ee0937785073cc0416e6553cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiya-gifuia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 384852132e994a82ea5157fb0525dddb06a7b2209d98c482c04cdeea62295f7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvnvi-bou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c36c599fe418de6716684051d1187650923bade046c85903c7217f80f4338c05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hopud-mavdida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa381c5bfda5128d7360ff1e5613866295249225a6b319b6b33a1fe48a60b7f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-haladodi-misaladan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66028d66bcf440ff7835f1c623dc531cfe1320da95935faad347fe1e69ffad6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aaawa-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f967fd4b16d2556a6cf78e7238cf60174d3e559e23e53a7cb03e57a739e4f9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fipoa-ihadsufah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6438faa7242d7a4e2ef714631d5bb959474a44ecbb235e263dd635933f0424e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahnim-satagi-anjian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc7fc39b09f6afdb5443ecccd6b9689b2dc9e6b57edb2113484838a474b7201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...