MAL-2025-180908 Malicious code in teate-thy-sonic-rufaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22db1f7aea4d4fbd48741d0c1c86f3eb11f2f5e0213b9d9741f63d9683e947d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gi-agka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5205a94cc462d99c74fbe3ef3532e795268c506a6a0df874e192e800c3f94c1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ibhabo-sgdahsdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d7f6a43eb4115430bcf2c307a528a6fec2f4988673d6ad7486ada1c6ba98cae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavia-maahayav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0722704506898a703c46903e5d2f9f48acf00660d07f48714e4cfbff15970bc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 546595a318228c8cdcd08a893f6ff0b827c710891520dfa99cdb1d0f0955f0ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahuar-satidaf-fabau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d7c636c1e651c63a1bace62ebe1b103be77070cb96c95fb49cfa11dcbab36a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kil-kokaiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f155e886e9ebee4ef7bb89e87f16af877871e78127317bea0f6d26cf8bff9039 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamr-adaraamsafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdb466adde05012c6ccf8f70f922a091f0cf29be18019ee3b2313091929c8bf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuragi-sutu-gaviaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e6ac6b4b76c922d3a426364e1242b22ba7191fca8b3a077a20457f318debab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-nuatapa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a96d3cfd22dad173237e55ee282588b4a5cca5ea2d8d42711bb840cce95f1d9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-buyavad-manha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e52405856ca6387c6ac0511f62496f5eb64254b2a3ce74fef3f21cb2bb0da341 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuragi-sutyu-gaiaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0bced62d39195f68f9e1c202aff119d52896be8dc97ce497d3682c8e9859662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurai-sutaif-dabauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68d15d5d345c008c70babe975d2994f5a93ee3a7065a6723a3877161c801884b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fasg-fnda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82bab65bc0a322680f7dcc4603824e18d186751ac193a7abd37300b582727549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutravaa-manusiad-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa6af4cd400e836f0250123ada9c42d6cbb13e339533d2cb20a97a543a77abd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hds-mamad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73ae4c3750c38233fe8be14ede321c33c5ddda07f0aa62920e45f3b9ad1767b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in truay-upozp-namaaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efbdf0c37cf86a9c79a95fa0696b20af6ab52e9a74cd6d3de382f7fcf64abea4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miusan-faud-aneraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73f9d866572064c6a43b943b8200610cd1ec30ff7f859d0801881c272d9a790d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapino-samunu-mudaavdabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8c0358f0f7b704ad67fe8aff97e209737148c4208317ec5d77a006ca9a5f7de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kullaa-jiakajoualai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dc14ed6d2c7c29b3a4414a5b192bf6f0f41bce89e0386370dd6c98e44797bb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...