MAL-2025-178980 Malicious code in tearich-good9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeb9cdec0236b396e6aefb7b9ba6bf120dfdcf541d30a9eae868d21a5510605a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuramai-sutaf-dafida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91173566964209c2ce087c7a1c4652f5e0989ceba9bd060240934a0b3ba2818b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-faffsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12576bf4e46353e9b69d015bac21293a7abf2170710edf32d5f00686e9b3b923 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satg-faniuaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44dd20e339754cec1b2b3cd65d4b0e14abdbe26e8d082d88bb417409a1643b35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a7f0de4a594431a449fe1e8c2ec5dbfda1b72ad791130a2f2f0c98c788340c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butahu-asfauui-dufusu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d994556611f935f57372d1211079d07b14ab712c052f9a069e70cb0cd1267f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73a3de7adcea4db9679f6dfb0d87349ea7f6193dfa42970d52986515265b58db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miusafasdn-faafuds-afnaearaaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b82f5eb97a4ccdebed857fe4321a0ae1744df6f6da79f6172f147594ec468af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fbb537cd353d1d34b4cc1a84720164bc8d511fc605eab0f8a6c31830fb3bf95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-somdau-idabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 515987317d5d8c7b45f5e19625378c13309edf7f59e6183cc925f5476e1250f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tearich-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b77f64cad393e5cd8ac7b4a255dda4d928809a60ffc23195ef740a21b33169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afahof-rafgabavzgbo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5490a06c6983c1179171c425ebee22e7f8486648dc2883b5157922c7340f1736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koko-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75f0a4e8a8add22b8d8eead9e1af3ca221d1599ad221facbd5cf636f739838bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimunaf-safiaiaf-cuagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2387397f2deaa825c2425987309b92e2c31f9d4e982768668b008fc9bc38fd52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-iutup-nutus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74b5b440707a836d3c96b436cce55168396e2179be9a38b058ab4f375c8b6431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfia-diauauafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e90eae1dbff48f4e88c5eddee5b6f35922ca7e7925fccb17fe7a083e176b3913 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avm-ruc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da624d16ec50829a7b8bc756fcacd695f0f97558ff30aa072b2821187420bb4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-nusafaia-nsafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f4485c7a870509f21e61d07661df823ac4b4f50a53f40367563a552d97a46dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugabuai-iumaivacifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a27e48d81bdaa33fa37bf78ce3a9944e992946ebe030f1621cf0d187993ae715 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manis-mioapagfiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1fc7d14439ce4f929a7fe1686023804e821fb7fedeb5266ce51904fb1bd4b02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...