MAL-2025-165453 Malicious code in sabua-muyaig-bafuima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 202dedb6af47681ccf57c3980f45751d05598041d673f6e136def9fb71c304f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3d59f782ab14989aaee70585f256d0af25147af6bcf126ffce592179a5eccf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mand-nofoay-mutu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a87c935274c295b2d4c3742667cc9c615e77bd3b6af0452644bc8c155ec7a57e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e32ed0e99a88d4199e52396a7983a641835d0734e49251740fca5376d5865d99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/erui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5ff922556d0f07a6f7e558f4fc3057814155dd10ea4ed0cc681f0884436b59c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4ef8213ec0f1187cf3f0fe5fd826b46450a9b4155e7559f1ff04313ec320da6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-ogauof-dofafsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4148722f96580d82bd4be17af904c5fb03cd2529efd4891fc277adce86e822e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aviah-afbiafaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3cca23544d93f1552e2e6834b0fbf88003f9c0f4794edbe3fd0c595e6ffd041 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d687f20b20b3070f1f09218ae803bc37c649f568297698841acfde1b99ee2b1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcd4829f19a6085265cac95fd221ecbdb6ecf716d7dcbc71f01bac43a0859b64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nanali10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea0ebc07c3f0ebd5e1a3a9fb1ad5b9c30b61fb5df4e2407d3262451bb6a9f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c8394105f1c0bbf1684622eb4b23b8ad842a0c4abc5bdfbeab8bd7c13d7b94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3bfd6e64b483aa47133e48cb9e32d95b36b860df07683bd15613b5b5f2cee4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf9d78239ee6365870fc66a21b1b5303de46ecbc3ed7570d5a1a519187c620e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae0a01f2ec450d1b8d7ba7ee5e46a1e2e3115640bba95e0e62aa8c99c3695bb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/jisfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e05a239d626f459581b846cf822389a50d1d1d24ac39a7d32eefbb20f9754b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/pgfsa1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85f13f098e3ef3970f70a2ac6c446de999a0a2d5112b06460424e7cbdc2a9d61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagis-figanafyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccb619f73fe70c409ae65ee06a43657b7c4f47f7ae1c5d61dd028d42375a079b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuyilani-nikubamia-luyahuambi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e143e6e9b821e36eb27a7afb3de9c9a9a8cacaddb39f34dd9b75da4395f94644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyua-idugaat-daa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86eb0ddc22d9c5967e9c04ab458dff532c587cbf3d8c1f38a44bf40540963cc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...