MAL-2025-178570 Malicious code in sahufarf-satud-fado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bc47a6376cebcb8a8c74df9859fccff409ee0e41bebbea287899a007faa4a64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmih-aff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58f55eb5c0144224cb939e741739d78f34644210a136487bf3d9c1ca124f8131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soni-farmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c31a0e432d4f84b559821b775629e7564b577a6b616559efa9b685552729971 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adair-bane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c3083667d7943a39a29ac28e135b2b589835547959cb7815b6f41d84cb61701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-manuyat-mayasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc7298aa9721d94870d8d23e265fc8c5d2f2c832701de2a6f600972d759544ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-bofi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91a5a8c8b81836128cc0be516d8cc5f39ae395b4320ca7082d314b4d68deb7a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogihh-agiggsfifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18dd46458c5522d8252650ff21010ee55acce88b174b8dec3ef654ac4dee5b03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-adaoag-agaagisihai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d36e2740f1fbb3b3581562783738b28b7a70af64d9f482d0f45168def01421e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minds-natudfa-vusd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bdc72f27e97ee60cabc2979ddf7a39225b009836d153820fdf7c67b5981105f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adudar-baidaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b14c42c5c025f0a90e4a441ceb8be3cdb4202ba6e5fdd6d871e96dedd9a6dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushiya2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fc0c45d61eceff1deda60b695121c60d413429a0bccb88f7469fd3f080f62e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godiatai-tufam-iubata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef2e82251fe80302eece89ffa0d87d59b063fc95716339e3faa8b865c1ab5906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahnim-satfi-anjifangi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829c9259df154eca58406354ffeb6eb51020737401b047d424842e990af9cba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mibasdah-manasd-msidnsas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fd2565d61ba6c0424ef9797c538014861493e39b256d94472ef21dc6b5d734f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymera-anakti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8d3156ddf26f7ff00529a8502512980c89827f0e2515f311c2030005ca0d0ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ananda-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b439ec9e13dda10890f4cf1f15feb7a2c9c43abf87bd17127d7029c22d800e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautg-infa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7004c8efe58b5d144882577e42edafabab61c289e56e4142e542644a8372c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teadod-mipta14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f82b97107164ffe08f3fcceb73280bda78a6577dc8ac8b2f0307ffe744727524 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-massage-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbcfacb325d25d05d8c6f3c77d4a7d801e7db9b993bbf8841d407d4f807eb3e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adarafudi-buya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f822eada82571b13d5c0efe93382fbc35eaa77e25cec3628dc17d26fb8151b99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...