MAL-2025-174487 Malicious code in goodain-sangunu-nutagfaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 110d79deed59a9dc4e2bb5a73df03d272ed7c22caac1484db91d2da965562891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butahu-asfui-duaiagufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 961a634b5da3372b3549b96675a7042c15184382e4d27c398ee612801852e562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfi-davu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ad3fa35fda24cba292432d9885cce0d841b7bf9b8672fd642769939d5d22bef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-miftah30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8aa7de8c10701ff0de58a22760c57c90276e6a508c179ee4df787d85c33680f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke125 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19f4e57ab64378db80878ef9bd4cd0757c9fc0a0d79fd1cf463e6c252f0d1c03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-maffmasdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 430b3ab53ec8ffe1c7917a58e85bd481744b31ec7944a5b442dbedad27e73871 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-uozp-pundr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d593753944fc5d9a6b11974fcd3a7509a183ce46ac2b3fde434853a2f7433a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in min-te-t (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9260e86996f0555471b69a68be4b4d5d1308c823e7b73cdc9b6a174e6d201e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-miftah4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a94c404d49d3568588aa0787dad19d8088312ba5eb3b001380db34d4b8fad55d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mubafi-sunai-caabai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5f77f3e6bf67fd4375e5c854642b14408ba9142f356aa4ea6cbc120ec915781 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimuna-safiagiaf-afgucuga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c294da943926854d0b2279353870f995f3332712cd92cb2b36fc1aaedd37ad5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adadar-baidyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70d0a48f4434b5e0129e78cd0d456512a2121dc3a6ca2347e3538ba93c86aac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-dadfadsid-doraema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09066d3de84f75bad6fd93197808b1fc5b32fdc1d6d7e674d458243005d5004c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-mabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb9d94e88793308f71ace388b60e3eaf7326e8b6edd7811562388a94c36b76eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adadar-biufata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9266f4914abe8b9d46bbaf221ed173fe6b5111b5ff1b7a6410535ef41f1c102d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-butaur-mad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35891d935d3489a2192da26c16a3f766681debaf91f3131a2e0de86437518839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-houd-mavi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3588dae1f754fc20f46ab52a3e8ba3dc003b95c9fe4cba7d59401182bb20283d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koko-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5acaf6d48512d9a2c8b383c2e1fa948a8fb29c3384f2c1fae02da5d6a9c51db3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognboagah-agsagshohai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c502f725ff3dd399c0c9e22f8c26606c1a8fec9d4151999669e27dd9dbb040d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafiun-tufa-ii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f06f1dd94e3bad1305da80997353187a74fb6ac7f7d1b4a8428745a87ed5585 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...