MAL-2025-174595 Malicious code in haruni-poke107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3715552786c70bec7d7d30ef6b259d84c713a12bfaacf6ce33e022dfa6c32bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d60d852b51b5d3a82a2ea23ee1b5cf769844cec364de40678ec6d02be770ffc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dakdre-anfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0042a32a086eca6a808257b56144ffe71b2d7b712c2ff60524761708b8c29bab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anehh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e6274c70175e05602b9dba9752535381a56101bf14876a1f150462666bf0a20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50d4da4efc056c9d764bad00c35d3ae93acc0b268722c1a8ef9f665e7231eea4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavia-icav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c381652f53c82f8623c38eb74bc8aef5b44f81aba1ae89e31614ca04bac4f211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avaim-rasian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db157d120f3d21a99529bea233e2f3119a34aee8f9fc323c20f9cc7deb61677f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miusafasdagan-naut-afnaearaaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5edeb15e07c64a4650c158acc6782f1a3d8e243605e0d057fc2594383420a68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-mar-af (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e533e4a39d29ce12cb72789d012e5bc3b1924ccef8277aad8b771a6cb5cb1c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-rs9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47372bce5ce26118705676749e75a346b4540701654a4251319a0aafe4ef1ef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautug-iaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b9214268a4166248256a1e8935bd10a175fd84b7ec4cdaf49fa8dca7887ed08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4fed384f1319838c815d9ff0bb0dae22baccf9c31121d49b3141358a8e0ec7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dakdre-na (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed4ea437ea6a1100ae8b6ce856228bf061adbb9cc546260836986e01035eda47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuku-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e83aeffc5d4095e4eaf5a740e26441927c28fff4a78eb660976e84fcc7069a1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaism-liamkiaianor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 846e40d594c17ce4602ba839338af3da834648f2f9b97b534a1dd5c5cb5b05fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ib-sgahsddi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 645ea4cd3ae454673d6671e51fc9edc945f596d448ecf85aab5fb7d1df12fbd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tugafai-imagiuvaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08c270a1163d353292c9263d5aebed678f46c86d9c6fa8bcffd54c091b116fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 336a0515e95635582049950f9e033463edc064f5aa5311e84d63a69020d089b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tufam-iunatuyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a18a34f56da3611f7e41668c3abcd568979af1f5220857ce9b16ad5f0ef56538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-agashgiha-agahai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c1502927f7c751c85324ef28db3d34d6f71b0e54dc230c055fd8b8f491c2f51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...