MAL-2025-173381 Malicious code in buta-fasg-fnda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82bab65bc0a322680f7dcc4603824e18d186751ac193a7abd37300b582727549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-vsers-buys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69ca35fc2cc4d5b9391ed9d21a5750d50ea4f62e62f552c87b9e6c9c705aea37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kimdjiwon-erui-vert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa41e6f7707cf1e5895cbbb49d9647c14dc6d50a7421767210edcbb77dc8622e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmih-afiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c46ae354caab9ed916fb9c2837015b52ef3c49aa8971726beb25d29d10dc100e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abeeeh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42fc1201ec9d22fca32136c586c79f88b75d88d7946822972ce6a49e93055e72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamir-taqbog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de1b3502efcb3e53cca0008dd5ff72b8d67daa9a23d41d417301b4bb20b51e07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hakim-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b889e6480c546d5ddd59d41c2a69b40eb1671b2f022d52158085040e9e48a984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-rich18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e782a1a27764ffbdcb682fe3c7f6ec286f6083eacd5609220b50a5823b99623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hakim-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b6f8bc4e4dd198f4a769f348e0c4cabf7bdd54a7a5c19e869d398f491725a05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munuafai-safnif-cafguis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3304f7f6ab04bfb427bb87a0b3387a28bb87e19bb5215d4e55fc961afc22bb87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-fafisa-pafasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27e917beb5bb54454ee79986fe64d0162bea8f2ce4df88879fb649a7a00eff1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautug-giaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 981072f266b997da70c978b616a19ac77a3f66600d123454490b49af0ad34800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodaini-sanugsa-utufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f97178a603cff6ba5fcadda0967e342c991efdf2a12cfb696557d813682c32e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-nusafa-ni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d98e3e6b7d92819d5a6bf0ca44e167cd719f92b3ece4e23516a45ed30090048b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c98296435353274ec1fee7ca1a24dd1ffed73ee4cb0a7b32f3f07911c7c917a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-uloka-jakalokai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 328920ff0a524483631e06eb04a04f71e5c84d19fbb0760036f36f9810e9526f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70cf78672fde4b2380d32485523fae268a0994cde92f1604b1fb4c3cb7310f99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmih-aiavg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39098faa93882b84bfeff573ad08055b0a5f895529dfadcfe50fc8fc32e860d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahuar-satidfaf-fbafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b7742acb3e8039ab5f4ddb648fb7c77cbcab8803c83d78d45ddb2d44bc5e55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 361ee2335fc4c9fda89683fd8a1b7eca8a60dd1617a2f8394054f279e3e0f6d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...