MAL-2025-178829 Malicious code in tauahur-sofi-dsh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f149a0098a187057343fe0d2d607aa6ceb70d1c672b7b97976dc3a074f45a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-muipo-tuio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94baa7e30e256aa248a2c8140afd2c79dbbe307f624649df9effea194242482d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fipajapnoa-inafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faede7e7ad450b34b3018a867920beb780674c165229dc889cba3348c149a461 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haruni-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb7a04a1c9c83305c49ce0c25f19f3491ace4612f8b79608d8c8391bba815cad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaocil19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36f4ec8358200dd912c2441ad4b8e672c19aab9b259d55f1c4e48ac32b4c6844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodan-ngafsa-nafauiagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad82d29b96eddb5d3213b71c5be4dd0a9e994f89984eaf6caba53f1bc705fa8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8442ad98a232f3053f831792444b19e1942e14b4edd450526b77ce165cda9218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banubo-imanmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b02605cb289f3a17196c9de3daa336fc2bbdb8e472fe04105684c37ccbad397b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afajf-roiffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a23478f24cf4c080c940c1266dd2274a274a923ee7511443f3f6e4abe8e1ae31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogihh-agiggsfifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18dd46458c5522d8252650ff21010ee55acce88b174b8dec3ef654ac4dee5b03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghh-fifaffc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87e38ffc250c0a966038ab4015cf4ad1fed6c651ebb6d97b6847911ae3706f88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamir-bria (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 008faaafcdd805769fa06d1270c5ef8ac68e41f2d88cc13bede721e4236a9493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teriu-tui-pix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a25f3088af4013c6cbeb7dfc7c529f81a639c7f02326b9558954b2d1be953f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ananda-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b439ec9e13dda10890f4cf1f15feb7a2c9c43abf87bd17127d7029c22d800e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahnim-satfi-anjifangi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829c9259df154eca58406354ffeb6eb51020737401b047d424842e990af9cba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mibasdah-manasd-msidnsas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fd2565d61ba6c0424ef9797c538014861493e39b256d94472ef21dc6b5d734f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushiya2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fc0c45d61eceff1deda60b695121c60d413429a0bccb88f7469fd3f080f62e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89d4d5a2454cf2389e1110a657e7292932c5639a07fcb0cfe8f25bc531f09c92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68ec347db3ad36d2a9fc4f609703789f1f28dec4c95fc70250609980c704d7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautg-infa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7004c8efe58b5d144882577e42edafabab61c289e56e4142e542644a8372c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...