MAL-2025-176589 Malicious code in nuilva-avm-rucasivav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 830e2aad509a43d87a8976bfa8a6ae864eca522d2031a079a0af300c66ef86c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-rs9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47372bce5ce26118705676749e75a346b4540701654a4251319a0aafe4ef1ef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanah-fipmaofha-hfuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1006b295de91dfd1dd379f7c0388b6f6ec9abbc70bd890b7b5467a64d02941b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-vsbers-bursh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41f73e6367a621426c160c3cc0f36a100388661d13ab5ff4a72eeb734c0991ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-stvbu-gainafif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47394340b697e928625cc8e72428002e0ee740a35d7103f9d19371cd4afbe9e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avmim-rucposivosav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8959a35db3d7c8ddcb7acc90c910a392f7b347d89b94603483fa5b7a7dfd50ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutr-ersusi-vdert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01ea5f8f7164a9ae658802f5d36dcd4234612102533968f960ca52304a1c1400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamair-taqibog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58ec2498a2bb189134d9b5fd90ddc9b205b62625febc4988889e1a6e8592f539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-budia-manahayav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd87659aae85972341554da7f0c7cc8c2824366ca79141ca0e5a76e1922b657f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tutai-ivabau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d626dfdfc54970194d1ba2d3c1c606e327fae606f9e7b84f962eb9b88778fcaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-faravi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4564d1f470c5daee68483e1f3b44389d440c6b9d975d0a52728032bbc1014018 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuku-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c194759eecc07c6e63b7e7783a576eb8f5cd4ea3a0c6b40fcddbf76c4388236 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautg-iaaugf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdf0bd643e011b01da4b4d00cbdbe52ca59c25e2ea311edb7d6641eb69cadf99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-bafaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c5ca82059b51c90baa2a72de67b2d408a5ec1fca9eba840eb5b186a3537b8c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodaini-sanuga-ut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cf8f7aa47595a442faf35ce15d6ba0ebe29e7897619f3b4f034c331dcd3d2f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abehhhh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae85fd0c1e0547c23d771e514bc05b228a4a03a551f842bc850501ae77d1bea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogi-ggfoaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45083b0675c4e60c52e20151f8a043e6700f259d6e9fe05b8d521a13d0b42e4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tuag-ivga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f027a1ae2df06970ca9d330cc74638b0b2eea150a185547b145995b91c266c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16e08b55a163e140e6f94266d934eeaf36cba8a5104eeeb0a0173727b307b8ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufar-satidfaf-favfaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08190b631a3e5ca219339ee810378d9bb4c6344fff80b973f4bb24dda5ababcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...