MAL-2025-169538 Malicious code in uaragifa-ma-sayuauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb02a9e1fe44450be8ea54d22d37b5585b48569b8a4fb083e69dd16fc987946f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masako-males-nurs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61c7a02e88985dccb422b986925375aff9a99cb4d55da57ec5331042c0d86ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiuna-mobile-ama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7edb5cdce5cf18435aa36390e4fe26001ec5021b67be4362cd89253aa4aec761 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/saysa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3950aa4c6b2e241032854e9a69cb9041baa2051bb89588ccd4387bce177771df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-uki-vilakabimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fe2bd583abe1e12e53255e762cd7db0129c09f1a3bc2d754662e6e64d6a54dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afgfi-famonauog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d90a91b32b82e195264e9c373530b21f0b21b56824d3c8595cda70203e371e20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ewra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de50538c207da15d6cc17e901e529902010c1a40d2933426f09acbb13a109781 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arhani69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e62323903584aecb30f2902ad3fc85097ffd02119db76d9ed5d06a29f26dda27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1178e3c0f3bd7ce4923406927a1543ce4a692fcdf9534db2891f8fc4a5c5709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mans-manapa-nuyady (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73b49f424035b44ba1d90a204e894c662c7003346b11cd17732626faf27f0c6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-ogauof-doiofafsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9295ee562b28e7a19e902a9d1d65c8fa090f9cf89e76ec4bf26b3043b0fdb241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aiaku-umui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67fd57667f2485513743099c5f35d718228a8db29c3da1e86fefee2f23af452f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tac-mehnal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9dfe6085d2dc622f40fd183b692cc8ae687903d0e2d59fbcaaf0b78a2243aed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c13684937374e3e19c3afb330ca6d082ff24a5068c805a2944e2d0980f106d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manttu-muniape-butda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7c96df58f3ec611890b2a484468f58dfba8ef13e3368b3bcf2729a268cbd097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in azhar-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fcb3ce664487c8a9914e358facc756e057619d52d336eec911534d5b8e35881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 935819c712c9dbfc17936bc12655d0723ae42d6e688e057e30af339a5ebdb181 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74578b3959db2540058a69f473a662480139e26f77e1527ac585cdc0040ccedd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ffea363faf72413cb7e7471386e4516ae435c9cc4e0325590c9d776d6be20f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-uyud-vamukalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8df0361ec4f8e19094088eb419c49af7517679c523844fa06983c351a90db3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...