MAL-2025-171057 Malicious code in conormccarthy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a6ee87b0592bc948d8f90996580122cb6a60b4b076c1ca3a3fb3e833f5264a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagmas-digfhagaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 041ff2df968525f0ce0888261d4c483be536c59700c086e0b02a27ac2c0769bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd77fdb2aaeac05ede70bcb749e3a3d76961739bfc53fc016e3a253ad1f6c60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muuyfafu-dafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24613ddd199978d7ed585cae37ca4dce975cc7d290a7abb10195ca5a523bad7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-boy2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5496cc8e6c017595b78fd4cac9691cfa6739515b45cafd1dd0623dae97dd7d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53da1ee1efd3f07f4b55aeb23b12c9ce56de676d4bd86c2f77b0d0d4761d88fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ca8df828c3367feba5348df7aac443e2969859564c4ee6f007477167e2e660 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7bfee52b97b3eb63e913e68b411394996e88caeab6275479a7e9444b1094a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/sdfsd-d1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af9df4737dc3b590271c3a7cecc041c72e393dae5040404a562b9c3e1258209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuh-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3159bb352d8223e2dc55d58d695f19a38100ec35e5220b2ce5de1ae15fa61d2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ewa-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 838ba09f0602d894251f18f35b2cdcb33aa5ae41869582210c5af23db848d88c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iomodra-foa-jalifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 266fb2b0bee828adf61ff10dd6cc9b76054621d5c1ce25d4bd6139009a3b1ae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c4ec2b31ba36680d7a5187c6f80907536e2665671c0c34ecf618cefa62c4d70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3731eedd2a408433b3bb566bdd7fd10d837df875cf25636769877aa58b16d564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scavior-d (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 009d2e521d39066eb508b466f6d05a1f6ad5574d66e0065ecb92554e4979b822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aiu-unianusiakpmau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4367517dce045cd2bc001c1c8af37c1b3c9ff2d73108541fad7cf2da15e6fe63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50b7a14edd78d09458bb6b16b3797709b223f408f7d96c4a90bbd18887766a7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iqbal-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f407604196c295490f916b7e65fb049fffc3bbea5b402baebdfe1b1444796fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afgais-fodafahog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce0b630b45155dd3919aa0bda140d6233137a4afd6b181a8f4e874613dd5b2c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83dd737b0a8cad69d472573f79f790a918ecf585a96b3639b269491046692463 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...