MAL-2025-174367 Malicious code in goodafin-nuiya-gifau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10064ee5860cf7df791ae6d318aa2db429869e4617e7e327e3e1edc454c6fc8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmih-aff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58f55eb5c0144224cb939e741739d78f34644210a136487bf3d9c1ca124f8131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gibog-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0dcdf7b979ac21945138232f5c2fb7f4dcb01f2355aebc3a42c08f0221d577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teadod-mipta14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f82b97107164ffe08f3fcceb73280bda78a6577dc8ac8b2f0307ffe744727524 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogihh-agiggsfifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18dd46458c5522d8252650ff21010ee55acce88b174b8dec3ef654ac4dee5b03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teadod-mipta10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 479bb403280c99a3696745351f9a8629051c6f4559c3a1a12d0dc11b0b3bbb15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teadod-mipta11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcffcbfa5948ceb925ec4caafe1dff701ac4f70dcf27bae1b3b7395b4d41efe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kia-jakaooai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 679687cf56b2b1bf4ada0e3a8606b951fd4b6ce25dbc79afd47661ed44e38c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-manuyat-mayasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc7298aa9721d94870d8d23e265fc8c5d2f2c832701de2a6f600972d759544ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-uloka-jak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d4161d2005760e28c20214b7085da62d955bfa8d60387fadf0754edd407ff34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushiya2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fc0c45d61eceff1deda60b695121c60d413429a0bccb88f7469fd3f080f62e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8442ad98a232f3053f831792444b19e1942e14b4edd450526b77ce165cda9218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghh-fifaffc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87e38ffc250c0a966038ab4015cf4ad1fed6c651ebb6d97b6847911ae3706f88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godiatai-tufam-iubata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef2e82251fe80302eece89ffa0d87d59b063fc95716339e3faa8b865c1ab5906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tuai-inab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aaa32aa12f0a86e44ea8a0d79d97dce272d0f90856a99102b2a18d8bfa46942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-massage-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbcfacb325d25d05d8c6f3c77d4a7d801e7db9b993bbf8841d407d4f807eb3e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tubi-iva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e60c7f8182c6ae131b97957328e0d2053411979a491fcb03a9923a34909bfb19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adarafudi-buya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f822eada82571b13d5c0efe93382fbc35eaa77e25cec3628dc17d26fb8151b99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fipajapnoa-inafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faede7e7ad450b34b3018a867920beb780674c165229dc889cba3348c149a461 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-faina-igaigna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775c8730c458c4758493cca40185f4fc5dd25d3325c752a2cbfc4a8e3562dddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...