MAL-2025-161519 Malicious code in nabuf-otmbian-iagisfjafpsffo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ade6a98aa43168415c22e3260fb4a515b98aa1a5e716f47f00d1bed1dbff834b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7caba44dfcd76905832522e43ac80921a79bd8093a960afd6219201a921930cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mursai-bdurt-sd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b285b395afa0339a4acbefdb72bf1b8b5013ccac5a9d6e1cb84d61973872e9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zenitsu15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d0c2ad103ca47dff2f620eaff024c83aa2f5c75617758afe59a07de4fb70ab2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d64492da2b18ec219bc86f02b1e1629fd0dd0ccc459806719f5a9d023fb50ff5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muny-boph-sadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80843aac9e7c027e65d15b2b8ca7e2a63efc32a6d063601c10fdf57bd7740a07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansida-nomafdi-munau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a968dd91562dbce45072380e709dc27ee1ab0e3845726b9e466ec2ea1d4e92c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-butya-miun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ffbaef8ebd7404c7bfdf3a3a67f1e57d7ebabca3304ca84b1727ebd5b493a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-buyada-bua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f5ae5497ce9872364d7e9716e1fee07c5c572c02703e7685fcfe6f7cc91a9ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-dibook-iku1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef196ab7426999b0e91b9b874cfa201399cbe970871e85b49e8bdd27f65cb7e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/mqhg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca38583daa1baf5164468b9b342771b047ad6f71ce8c352053412de8d931fbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-toafgviala-madakfio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60499c677f68032c057c74fff9981ed1cd1422571e5b0b7c9c7a16c267e93dc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8d4ae95a8d11926873e2d275e736d08c488082b88dd8924f50cc76375d0d910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musnisdr-nuyt-mussast (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1be975ca1400554c52e4128d541b98460b1369df3e7d0defef542e9adb4df9e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-f-gafsaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21845d20a17f699f6b2dfc713b8620b5356ff5fb096980623d3af30d5bca1f8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makaimaan-ania-gugag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 888ae4d43c2296bf56306bf1df6d694dc8487234fbfd9c857ba9d83832648f10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-alnbio-toliabanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89ef99f9084a24a473ce2aef6d2c91909f4f824ecce1c4095faadb459b95535c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manuk-nanagi-gu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1efe5c9f4cac2e6c6a1d27c222f83c12acac7a0f8592d4fb85d0b5ebc6cb3599 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63fda8bed46acbe44e0e21745af2cfc6cec952f7d62692fd1da692dd7c8f377e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyatu-tyt-daut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6937500ce4c6d7334ac86b454006ac2398b928c3c643148899c4c50a6b6e88a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...