MAL-2025-179916 Malicious code in lookingan-jeje44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce381e2f6ef037caa80da24c831b7775c32881e8c62317da3b8cda1f094a32d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghh-fafhaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e44a8a9fdf2cddd86f5135f7350c89c745822ea8f7e9991c87fc7c931a91de82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haruni-poke113 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1327e71b2842c14a7943bc0f16eb7b0798fb80c684f79b45281992aadbbb6e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutravaa-nutafrd-nddfudadtr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector addc95532b427c2af72a34f3d71c35b77856d06c172564ac5fd07f8175b2b4a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tuam-inapunaupayu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b537f76092db86c5207d4dbacad1b4db38608a002f3ed1236ddb000cb3fac0e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butahu-asfui-dspifh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd4afde591a1bbb67bd7470a6ed3ed110c9e7432d6e9fb5585443e1e7b72557b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in traay-tusdy-tryzu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed732f4bc6782a69e39cb7313936a35f7a1eeed27cd9e2e85dbba01ab1a956f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-mar-afadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f06c0022e3e3a990dd23ec84402398f70aff4f83f88a73541e0c1d0486882c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fifoana-inafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf4af475ce325329523c28aa6e17a53f66127e2a2286fa0fa2526d360baf787f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-safafai-acua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7e1808161ec5c28c0ca73c26078f9328bb150255c5f254d6b811f32d6d75195 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in savion-goodmun-pix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13e4bcbf07eb1c5317d5da644d942d6a42a3ffe32041f02a9a7bce9dcb2ff8ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-mar-afadaff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8743d2c6b223af3c0118c5c289e558714a44a2f4a1950780a51ceb5fc55895cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-manut-mayasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67610d973c73f02c8fad1b4254decf8cb60201392024c77cd694de489c87ce7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tusintabi-ivau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f677b948ce367033ef55e109794a3a7710aa6a21c48db027d46541e23bdecf31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mibadsdadh-natufa-munfsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42ffa48b5236d1d4328f6501d8705f9061ecf33db8006e09b1ba292fb1fd9d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kaguya25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae9c576c3204cd4de272aa0365682a90067a70d96c76f003624c097fe29316c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satmug-fafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62c96d4e25fb5692fd3082ddda4ea57842b8f1ce142c21a0854327c944ebabc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-sunina-munaban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a0509cdd8910b780e66d36d00a21ac3629487721e25a8cace9cca91ae5c6689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e485095ad6e8a5c37eca76b5d29d244c583184e5e92734588bc4aff9271f183a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-ka-ahakaij (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb6caa785868b8b7470740e14293e39018240880d1932ba0875360e0ccbb4eb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...