MAL-2025-161367 Malicious code in nabuf-oguuof-dufio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f15387e77383a31e02059913883a99e6074ec47f3f68475e21f12cdd3b727da2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5a42117652eea8fee4ce78b70aabeac218ca284dbadd5bd50e96b5b754299b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7ce243bb2e70b2900e30158b9f45a7d2f047687b2a07c22b5d2f4d78b86d5e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mans-manapa-nutayi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eb4b3fadca584a08f0ff17f992573681b6c43445cdde1f66a8b7a03c385ca7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otgigaf-dofajgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 483bab7784e467c873f184257acd0022d7ecafa672fa3a5805c788f9efababaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-coki22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7124bfd69f3dddea81305aa12418ce543b57ed65d9c1a7c017a3b113dcb78fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41118ae8bb72b7d3ba65c84bacfe9aea388e0338e18a38b9a50d2ec4ed38d80d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagmas-adigfhagaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66f78c635381cc560fedeb943287f969a480b39dcd67c28187857dfe2e45decc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-aigoamoa-iuafafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afcd66982a5b441c4e87fc682272a1327544807846d7615bf28d0477fcc29878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-buyada-bua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f5ae5497ce9872364d7e9716e1fee07c5c572c02703e7685fcfe6f7cc91a9ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-dibook-iku1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef196ab7426999b0e91b9b874cfa201399cbe970871e85b49e8bdd27f65cb7e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/mqhg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca38583daa1baf5164468b9b342771b047ad6f71ce8c352053412de8d931fbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-toafgviala-madakfio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60499c677f68032c057c74fff9981ed1cd1422571e5b0b7c9c7a16c267e93dc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8d4ae95a8d11926873e2d275e736d08c488082b88dd8924f50cc76375d0d910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musnisdr-nuyt-mussast (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1be975ca1400554c52e4128d541b98460b1369df3e7d0defef542e9adb4df9e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7caba44dfcd76905832522e43ac80921a79bd8093a960afd6219201a921930cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-f-gafsaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21845d20a17f699f6b2dfc713b8620b5356ff5fb096980623d3af30d5bca1f8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makaimaan-ania-gugag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 888ae4d43c2296bf56306bf1df6d694dc8487234fbfd9c857ba9d83832648f10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-alnbio-toliabanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89ef99f9084a24a473ce2aef6d2c91909f4f824ecce1c4095faadb459b95535c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carssa-saad-asd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c0fef7ff1ea414f1893b3885a13deb63063cfd06d6d805e9dc8e37cab4302a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...