MAL-2025-177452 Malicious code in poglymer-ogminmh-bafaagsig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcebff0f5c117724327054105577f66bf3d6a9b06bd28b83ec2f28ade67c1ddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banib-imuamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f02ad46413c928031c8294d654b0817a708137727fc354006452594fb74edcc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-bani-imubabmo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5953753c9ea77858b69845b020d145f8e1695deb9991920dbd070d4711dc8f13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofgdi-gfua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be1466d6923d8cdccee041c1e1af2a7dffddd82b73336b68c74226e0530c18c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manis-mioapagfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c255c87ed6be7ca2338069be33cad0b17de7271ac32e50d4e0537e2316a4340 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dakdre-na (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed4ea437ea6a1100ae8b6ce856228bf061adbb9cc546260836986e01035eda47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adudar-badya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3c9245ee249f2c882e929118252ab415f43d94793d5cc0fbf0153bf159776e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ea0bd4a312b732e8d3c881b1b6eb160368d713d6f9a43f3743f039480408bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-faina-aofagaiana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 825506b9c525e62a25e9dadcde77bfc12ef0ffa503bcbc254c5d9841fad8302a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-satsgamf-anin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f164cb1f3b3cd4afbaa2d3091ddd4f98a6470d0ddeb7da58deb983994fe25eec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in truay-upozp-namaaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efbdf0c37cf86a9c79a95fa0696b20af6ab52e9a74cd6d3de382f7fcf64abea4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saviotn-issad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82d9a08bdf7ba3e6c8b5397ac586ea3311fe9171f692e7c2c3be1f636eb0af68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thumbi-ivs-trsud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef7b41c0f48617c41e87985059a90cc8854212ab683eb8e1640ae9eab76e9160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satmug-fanninufaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d598a79116bc5b3992fcf42474234ccea4ed80d7e283c98f847db00d56549e4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-ngafa-naufgif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8a398e27c14fe387fa88eeec96aad162b3e5fa8e00149c70ed52a177a315517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butah-asfui-dufafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 736fb7d569494914d184dd0525498fe978770f659c68ba0a82f75fb1ff8212e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-baf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0c22f64ded383065623310d4f3e4d02c36e2e5479f7b3c6f2c5684b9c36cbae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufar-satidfaf-favfaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08190b631a3e5ca219339ee810378d9bb4c6344fff80b973f4bb24dda5ababcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gibogaagia-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af4310a0d69cd5441dd7d88fb2ffcd5adbe241a5fd07096c352fb842ecaa75bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93591bf26cc530476f4cb63e8a522f959289492e2d086b0d7037a263614a97b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...