MAL-2025-180295 Malicious code in teate-thy-sonic-dipage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b0ba231fbcbc63e7ff245b461c4ea67cd947fc1de2045d48a8a993cb34f3167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soni-fuvdavaibova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd32218ed0331f95490005525b09dc81227434ab90aba7aa4c81e5c2e43eb448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hopanud-mafidsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8f08db1d6fa9c232245bea8e84c8ac3d3d22422b52573b246476147efd5cb91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-faina-agna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34883a86cb57d47d7df4f39f703cb68c9acdb2e31e0602ea578e3b95ec12f4fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogi-gfoaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 378550254ddfcc310afa6a0e207a4ead8c11487ad3923a8f45b065e698dd98b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfia-diaafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a33ecc489d486f466e37401162f17aab8a595a2f81e98849ce014e8789588f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-gbbssoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f3702893b3d7d3787dd02a08293f7ef5df747ae8d9c1c20bea851e3f4c059a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kaguya29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 292a67d1869e8964fd432d1847ae061621d1aa9e37f3f6cdb461bb69fcd479cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimia-satfihub-naib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 588b9b7fbc117f2b1b3645af564bfa93208dd8b3549a03bc4e8ee9a99e87057b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munuafai-sfnif-cauaguis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a2dcfa533539e869fda587ee4d10527f4e44fa000034bd8def7e86ac204659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-nalika1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0216b1483fc0aa64419fae4722dc1b44f1ca2ff7ff9469d7becad40d71c1d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurnua-sutif-dagiu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 419770b26cb218c12a39175710d7a39047a4b18d253675b2846021132b0df8ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butahu-asfui-dspifh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd4afde591a1bbb67bd7470a6ed3ed110c9e7432d6e9fb5585443e1e7b72557b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tuam-inapunaupayu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b537f76092db86c5207d4dbacad1b4db38608a002f3ed1236ddb000cb3fac0e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in traay-tusdy-tryzu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed732f4bc6782a69e39cb7313936a35f7a1eeed27cd9e2e85dbba01ab1a956f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-haladodi-mil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d641b4a84d556d2292f49a5d52f0e02fcf55d2e86249eb90159d9b251e5d8fb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurnua-suif-daganayui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c6a1fe5b860e462c67c0e5dbebb857f890c459f6e8540fd0dd538cb283077b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-gaffc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 768e9e63d49cf73b0be7740fbf6338c1f9252d06244c42d6cc1dab3c60e68cd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37974db33adff9c375ba5c6c1a22daf32b288784ce87644a346037ad20bb099b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-bafagig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b26b987d38b7c9f50c43d7b700e8b62e5ff9a3eb327c9531db0a5a699c1cca71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...