MAL-2025-170632 Malicious code in abdullahqadir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 859834d5b1175b0afc7428815f8dcf0e547a28cb7676ee7dbbce6e4f440284f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dfd32bd52e25059b11e46fef010ae60ffce4c587f9f89e48ea159b6dc4013db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 824d99b828ae275d75ea74acde2a97f34c6966c205cec9279f0ef591ad5abdec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b49b4fa63b948159de1c24b024d38ccf59b4175815b17a7ed96aaf1f613f60a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftaiky-doll-partly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9752d4e909c55aa087b0f6dcf9283c9102d05fbba86ab4ec5dd865e75dd7e29c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyifua-tut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4ac35230685a4d80718df9e5e98561e495146d51c11c24344c41fce31c2cc6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eabb453b72ffa96d3b7dde58862cd957d279424149c57dcda5fef31d7bb7d7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3344de29088a7882ee60805f6ef25d69269ffc07555fd65c4aed04da03ca9047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciaiaggu-idatqt-fafugofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a34fa15162c58e48bec781281b2c78e9426b2238b097de6fbf0019d8b1fd53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-afat-usutfar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e93424d8acd1dba822da9c18997db6ac753096e1873466175249e244ee89a408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-dibok-ikalku1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac697aab7c49567dc8ec8b29a3298a1d1d9504728ed54631621a6e87b50dd45b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ksofad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 831028648104e2ba1ed802f61966c716d99556ed13dacd08c71535dbc395e999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-amugmi-amanamu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3487261a2a6d39d90a7bb981974b976d41c791f93b16ba38148ff51a50d98a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyua-idat-doauuufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0e53d5845f18cfb72156619ef2103f96ce8a94d1e075f3aaf97880cdf0b7261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8de9ec139e4b628d6245ef52ad2f14cf89a1251f5feb31ce1733e488bc12ebee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7ac0d6f4adcaffccb10590d4c50f9f47921c9621c9d926f8e51950b1452a683 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotumafa-anfoaaaz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41e531bd6d6fc521348191c021523df5db08a3e2e9eb4024c16d6caacb01eb22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-aiga-fiuafuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb5f1772b57095be54b7e8b20ec490cea58ae844dce7e4d89b00dcfa55328b32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-ntai-yoadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96f08f5b31fe05b3c9bd81f491283c665ad90d95fff7303675be371df2d79d67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/tadx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81028ba5d18a96f4520a7caa5ef4b2f2135bcaec90020859ee6e2acf28ff59ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...