MAL-2025-170770 Malicious code in akifnazir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 559a88c3435964de9afe2a17a2ad2dc36e347d7c922fb2c89297cbccd0bd8f99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftaiky-doll-partly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9752d4e909c55aa087b0f6dcf9283c9102d05fbba86ab4ec5dd865e75dd7e29c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8016d9c7c83e6bb9e9160bbec58c58ecfa0320a4aa8bbfceaf31f7f9e968d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyifua-tut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4ac35230685a4d80718df9e5e98561e495146d51c11c24344c41fce31c2cc6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 824d99b828ae275d75ea74acde2a97f34c6966c205cec9279f0ef591ad5abdec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eabb453b72ffa96d3b7dde58862cd957d279424149c57dcda5fef31d7bb7d7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3344de29088a7882ee60805f6ef25d69269ffc07555fd65c4aed04da03ca9047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciaiaggu-idatqt-fafugofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a34fa15162c58e48bec781281b2c78e9426b2238b097de6fbf0019d8b1fd53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ticul-biuyaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 988eb6ad7547010b0b23fdccaa7efea28fd9ae78e07e3dbb97557fdfb8532199 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-afat-usutfar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e93424d8acd1dba822da9c18997db6ac753096e1873466175249e244ee89a408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-dibok-ikalku1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac697aab7c49567dc8ec8b29a3298a1d1d9504728ed54631621a6e87b50dd45b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ksofad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 831028648104e2ba1ed802f61966c716d99556ed13dacd08c71535dbc395e999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutaus-manasipastu-butysd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47bf03770baa90ecb8dd45ba0e822aa16a783cb6246346e37c7e4dc9ea32e3ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a16d6dddc5e49d2014983e29912d9812a83aa7c3f05b65f21bb25ab23f17c70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-amugmi-amanamu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3487261a2a6d39d90a7bb981974b976d41c791f93b16ba38148ff51a50d98a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyua-idat-doauuufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0e53d5845f18cfb72156619ef2103f96ce8a94d1e075f3aaf97880cdf0b7261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8de9ec139e4b628d6245ef52ad2f14cf89a1251f5feb31ce1733e488bc12ebee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7ac0d6f4adcaffccb10590d4c50f9f47921c9621c9d926f8e51950b1452a683 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotumafa-anfoaaaz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41e531bd6d6fc521348191c021523df5db08a3e2e9eb4024c16d6caacb01eb22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-aiga-fiuafuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb5f1772b57095be54b7e8b20ec490cea58ae844dce7e4d89b00dcfa55328b32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...