MAL-2025-170977 Malicious code in bilalahmed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d234d51a9a6275d9e4079bbaa86192aaccd9a1e90e8d7b1ae583e3e8eae2693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lisa-amudak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9aff9531992270d95a60dd33ce5ae807dc5afff1d6467e00771ec023a7d8b6a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tear-grsdas-rc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d08680c63d6dd5037040ea8bfce9dec930dda5ff1f067d7d7751a7ac7de95cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abf73f43860555012c3c7bfbfabe7db726f4a4145291c446a5345071d8342aab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namadata-munaroha-mufafnaisfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06f18a588fe50114a026c420b4a46a574d9f9e5504b2efd826c93d9c3d3f4e44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c27ce0377187f989eca67c6e0b50e7dea4dad12dbf824f7850ba4e3210b1b4bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/jns-21r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbc0c03bb2d04ffc9eb406ebffed10b24f257b43cbe6ea2a411b9fd3a8f53937 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-toaviala-madio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f6d761728982f3d9bafe99f4da6118ced5189e3d0562dadda03fd3f33990863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 573a58e8d1c35ea5d5830b05e62782fc4c7dfcdb3d1f0c86c8fb2c178c09c02b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mans-manapa-nuyadya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dbce09e93d02d8bf0b24aaba3cb8bfa211941d344641a154e254a251855f972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gurs-nuraits (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af072a750f03672bbc936efec8aa8a40dfb8f543f03c1b0298ee1e5c16ef9842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uarug-miuafi-suatfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddb01e3052e42a7722fa4acb41ab401e3066b0db079bd3bb8b9e81e3d18438b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f8239a7d9442d50a16bcd268480c772add8345c9389a2506111c3fa172d5ebc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otginaaf-dofju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 449d912b28ad85e60bd13452f17170703dfd18727b881b1a572e37b1a4aaa908 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-oguuof-dusuhaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe2dd56e92733260359449578b9dccd4b602baa171910434e3ce6732e8ef25f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72144a8dd0ea71f0e930499afdeed14164f488bb243672ec39915db61e0a1675 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9419091f657114f8d55ef452d7f746fcdc2ebeaabf2ce109291e717fc8503d0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bintang-tea10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3558a38ca8792ac9290ba5c9afccb526035ff969c684bd8df45f811f9d094d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otginaaf-dofpahjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 777a6f306757080026817aadf732457a5787a5419e938deb04bc466ca8c2d5b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f3765a44482cd50ae2101f98f3c2e7083faa151ab8f40ab3e8f69d33041f193 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...