MAL-2025-174741 Malicious code in hitachi-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 163b1402ed820f9188d8e78c7eb2e86a2e5f3bff9df8e3a7c8bbf41a554e9a64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushina19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7c7a09c80ddf619931d94a086524adf7f2e13fa53bb158aaf41ee09400f967e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tauhur-sofi-ditouay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c41859505c5ad5d8c436a8be43b308821d6722816e1f4a3306d09fbd59fb27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavaim-madbavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38bef00c6bd6ab362f468fe15a84523787cc2ee6c91297a095ac25a4acc287c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahuar-satidaf-faguba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 565e119433531a7bdf1040b34619c81a328d9725bdf35354d0866b3a8e0d84b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b385612a66ce55d5769f6f4643f9f36f0159b383dbdcf8e34e30e636dc6ee68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97ebce0be6e61c392b3a086ce837c4efc85f875a8d0020c21611f385d26e98f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-datdsid-raadar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57c2614e0a3c485f2e7201cc31405dc23f90e486972bb76ce07fca1393278840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuku-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e83aeffc5d4095e4eaf5a740e26441927c28fff4a78eb660976e84fcc7069a1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avmiam-ravfon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a34d2744e3f6185a6dd1329f5604e92bc623b47e630e89e390ed6f873132edee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbona-gadodf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9db4453b934d1c925fef84159bc9cd415ecaf6dbe09126dbef68fb14f994b84f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hds-mad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 456bda0957d157d1f9b309147adfe21d4a56a03200b7af68150b152e92478a2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teadod-rsi7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d93f924f66a231e213179571b6996834fc86e6861b874b7e5638a36bc74efa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-did-doraema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29dfa6320c9feece58215fd76757d813615768883c6948f883bb22dcba74bbba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbna-nafigoafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f2236bd8376259ab0ccf31a54483b98d3f7ab9b72f2c0877a511eb184b4ba31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuig-giyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3efed51db6f5cee5df4ecfc594f55584cf2d82f2f48f46054cead52edc1f1f11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugabuai-iumavac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 596b2b2c07750f0f9599382b6134f24363491b00f4e80e6283df5988d27a92ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-faag-fnogsfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17e39257143fd362b6d22a7021028c7e0cdae1e1c991cae3ed6107369879ec10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hadis-re (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24deaee11dc66c42010f3f218a3c6b60ac2e4375effe64ebef41f4d4cebfa508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sugoodaini-ngasa-abainu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88ca0c35a861f7e0969cd886e839129611d410c895a450af5ac051cb6c4aa684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...