MAL-2025-170656 Malicious code in adilfaheem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df3ec428f89c77a35982ee24b679b829350d4b8dc792d4a1b27967e6fa3f9366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 620e970886fd007eba5d49d01b472db10a5943f9f3398d058c5b96399fa22a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ca73ff88763c251d2533f93da4dfc5aa44376ec44a5c4681626d2a269104e59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muny-boph-sadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80843aac9e7c027e65d15b2b8ca7e2a63efc32a6d063601c10fdf57bd7740a07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ewihj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fac598f0a51f93e5a2fc731d1c65f3208e8bd55c2a2834c68ca2441b7ff8765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/tdaad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 122cc8524dca1c89aa2a24315ff42f90b164df5fd78412a896aa6beb7c3e4231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abu-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9620d9b53b8bb31f932b6d5250e84da89aad7961b372a8c2799ab5133ee96a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acb2fa9164bfd4dcfb261c5cc3956a5baa98949ecd5670af13d05d9529a0e6a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58a6b7535e78002ba2b791033ff294dd6d120d115d7a36ce7a2b40603d3c489c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe139cf17c1b54defe2cc22b0de9f57b9dc981480ff1d5d612d15b23a4f2b66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ec50e4fd9b23448dec04bd3a2ca00191dd21a48ab527108b004dca21be548bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0214d55e3faa9342ec33e19f05022f4ae42ab1ad4b85bdb2b087dbe6aed58931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bufani-muiyau-fafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb027a982724afdb951b5c73fd2c15a46ddd5a0a6cb4debc339713176a7a8380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bufpani-muiyau-fafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8295734d6f48bf337ce25206b95088433923390fc8c00895c9be2bf743f984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carvahal-nutsr-sdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd596fd3da9d27f02b293db67b4253631eafdeb8edd106bc8b0b42fdfcc2d8b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb6a0dc98ae86918a59e3c4263041262d0319faa888033a7499b53f5afb5ddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioago-kamo-aila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 095a79cf4767cab257f52c64f65b2137e915fe1d5f8a4106b5e00611fe51bcc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42203713c9f41e61af64861b64ead384c5b8bf8873aecd3380c42f7ababfa39e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8f4c2d45b9d020d267aedd01927ee51695878216fbfaa8306791968302ab0e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jimmy-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f485628ae2002aa77af27b761f73cfdb0f0265758f5d0f7038c4872f31fbd279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...