MAL-2025-173241 Malicious code in buis-sunia-muna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b47d9414011fe320f084dc3b88763f827c851fc50956fb12d38cded42a9db537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushina5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39c3aad49df41435bc64aedd1f2644c15861f57ccc151c85eb668066b11d9251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-io-sgdahsdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecbc40711336e7d840192390a12d5b7624731b6409fe433ea79121bcb481211c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mubafi-sunai-caig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eeb5bbdc11d95ac3f897ad6cfb65e8f4646325444800eb973f09a0e0f74bf81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanah-fipmofa-hfuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54af6c9ccc732ed3a391e7e83fd1747c41622f93e342983617719b1684eb64d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-tea-tred (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 941becd8992ebe8fac2f5d0e1240f2a9bfd7273fad75a4c249e2d18f6320339e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banubo-imubauar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e791655c8261f9014d9b428adcb3956aa578f9c92f1af56f19aaa3e62841dd47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-amar-tafdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59ff2cce3e14a1732fba910068b96b37a412a8b32f00794a4027f7e84151a755 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gibfaahga-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0566d0e65acb2deca32c63e77d92f0d27261a1cd640ae0a97e2c6e248982ff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mufai-suffi-cagasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc918e1e5f6fa19cc2e6710c700ffed45d6d717044ea6a1084b416bf378b4f9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keke-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63ca5499ee64242592ba203a909b4c8c4de396892b5992cc264a5447997c4851 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mibasah-minuynfas-msidnsas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ed55cc464d8f35c2692b94daefe2f7c4e782af9a7f6c74635288dae23cf0b7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avof-ahagopgaafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66112974d1d6ec8fa4dfee3e40873ef3afe5bf6989fe3c2037996d9de6cd44d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soafadi-vnfds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 077b5b29d44c3c568ec772771a0b980b01fdfa3b261732770ead0c45b8c8b223 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awaaaa-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6b7cf2abb635cf863a6c49bfe0fe688b53d721a6ff8621c8d9ff4b8473ad59c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tugafbai-imbua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3ae59b64bb24073cf7a8a621915dd9c9650a8134f59e543381abc0d0d7972f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmih-affg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d80511ede6f618285808a799221e1559b8bd20968482e0c753732aae76e0876b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-giga-agka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264ac247412eebced88897263959bad6e38b0317ea905c7860614c9fc42eb55c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogngh-amagigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bd74e23142999ab0eb07a694fbed37f22dd333464939a85633ae96aecccd4a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1ab5e7d9a954a44c0631332d06605ac55f67cc8a3c4aea26150834f48b592b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...