MAL-2025-171301 Malicious code in hassanescargot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a7ae1496216f7bd238c067f19059ea75f54fb0059f0b1ec25af871bd1d8658d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/savia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93aa5d7b53e8036b3c9873ebd5d67bc73b94f178247ce70b08d3b2c2d6c711fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabia-aligma-agbva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf30789041c452c967ff6f4e1207759bd0c58793d8e46237464b5bbbe3ec9853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akanabi-alaah-aimava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a30dc0fc4479dd3795cea8dc062294df4f903e2d10fe5a6a83ac594bbf165b34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bufani-muyu-fafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c303790f20c3cf70e78825612e392edb753b352f50112387a626809ef6a49ec3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kamli-luola (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5a21f9b1cc6c4d32a9475fd9f1b47d0d13805938b0390b752a04c71136073b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db9b687ffb0a6726957141c659c3843f58a9adaca458457fd85fc0f40b9951f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotumafa-anamufozai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4df4a5edc09b338cd07a2a42fd30568918b35f1cfd378a8e840677a00907b45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iomodra-fofiori-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e1c154a8cdb156e08482ccf45f70f29e16636fe41a887af0087fb64da1aa6ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-poke68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2002cd5d518aebb0646dfee2ed99be5307b206b43cab86f9c33bbbeec010cc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bbccae8830fe6a61f2d9f14553ef08b1d1b8378ce300877812d85a9fd2b7598 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 032578a962e5c48f2d40fdd92bc9d44e66e3e9ecb92faeb919499c5bd64f7a43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makanabi-aibba-uf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f2eb1ae3f5c2c67911542bfe634a0a8c7828e6ff01d08c9189b296212a201b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansioda-nodna-mufngu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66d21bd829a77f784d2abb4613a28c6376d71481257474b1fe984e1476d468db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansioda-nonatai-amutgiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 518723a17edd37f4c39a468744f3fc2d3f088d814ee94622aa63619343d73b05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manud-nofty-muatu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b57972a37eec9415c9942b2c4971629cede47587efa7bfc588527334caa3d632 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c1aaf91367a6b1f4cd9a5f256dc33a9a1a971a642491c872e9d169d78302c48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d7b43aab4da2d984553f10d6a53bbc134a871284858d84873ea27dd8bcb6c10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudalea-fofiri-agob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a10a2424367be30f8a989c4f1629cdb257f764b0478b024f4efda9a1d0f4a64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 585c7576f54ab059834241b928724783c801429fff140a605391577e105f92fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...