MAL-2025-163698 Malicious code in nudalea-ofogiari-agua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb3edbeaac2be4d9f1981fe9009617852ceb3f9fcdeaf59ec387be9db80ca826 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6bc083c3e622910954b16b040c42793ae5e6cbe66ebc4c7687add8f36be6505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-fofaf-gafsaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d11dbf5e43de532f976e0c5b46cfb6ffc71850448d16e2a42b6f84f48e3dff29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7275342cfd191056257a42f008c69a7aef616d8553afd324fcf20c92ceba6543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/xdz2rdtj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 483eba19755acc71733826a3cc7f3120553f4ac7fd6d564fb830971fa4edcba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aec0bba97e279f15f087e8371f8a8f5c3f2cf701c7992e58650a0964d8d6d34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afgais-fafdosafiaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f758e08e22d46c68e7e0fee568a320f6f741e10061a3d952530a8c90615fb23a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andriani-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6457a0ec9330cee0c442225a80bf8573f2e21e75617d515b54b833360e7d07ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3de7f552b85924b5c9ac290213ffe1560926c32a8b9ca9d6da96b4152dd6652 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymera-manuyat-pedat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b41c74fb0d4d678e8013a5c1b3d90c73d0479d36c234c4b69a3aad19d25ad96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd35255cd2b2132eebb648b90a5681f25cc98f42f7a798f2c83e65a19db31997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapafovgipfao-safa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90cae31d8b18b19e195baf3fe3bd2b06e5e759f065feb200f9e6c1ee4ad575ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/ad-sasd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dcba1770860445413825eee0f937139565f53e849e131b198bb19be7c1c4635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuibanua-mbian-arasta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2addb6ae3dead262c3dcd24bfb636073d99558bc7b9e847123bd7fd4bf4f009b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 952bbfab0797409b778278f78c3a0f1020f28c06b73ed60490118b0651a04e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a71ef11370ad7654136028dc6e56d56729f64bf9d3d6eb488a2be5793032d0d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bcd636a261d212129275a49dd602623d45fbb31d2ba96313b1b23015e6234b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63651315633df79734a0aaa19ad6aba138fbed61b87bb1b89a70314b62e8072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manila-ala-mafgkoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb3678545cbee506f07ae028ad7665cc04de438b78e9d9c345617303cc989d35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f912664e2365ad54106d1071189f80e26e78af667aaa70e23f1975b57b2fa88e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...