MAL-2025-171713 Malicious code in pagi-chief (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 068da2729955f81196162b27348a9e97c134cee022f20dfbb04534d433db3db3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 017b012fbaf36cd45ea922de3f6311ede5a314bf0d077fd6014d8079639148dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nojausggu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7587c529ad59d87468cf93154afc828dffdd97cdf2d8d54cc158eb3e2348bdc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ibanun-ota-umaibtu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc4e62629a437b1dcbe2e0a5193c4c835c8bb3a116640125f9965b9774128377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 410af9a6f3a201bb164af56317fa75f0d947f866233a97bc3da58f2436adf99a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nedarioda-fofiri-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c655abebb0da065c59a0024c120f84dc728b6b0d856708af4e561dba693261bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/asdus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bdee9a3265e5e25f6daeb8dfc83831b8f193881a5d1185fe165d3c87b0e8085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-gaasd-19s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bc99b4e82d2093f9d0b898713d44d320490eb2057567023475623b1de361f4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masan-ofalib-bivabunla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72c7f02eba7fe7e5c4e43e453616800c0270df8d84fa6377b4d45f932543c20d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-taic-busuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f90667c6315c358a93c5dbab248f55c5318c97f3e4d07e0aa25d64853333b98a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pajero-cir17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1361bcf9c25363bef2ff69121feab8bb956bb12f50c4263677f09145954cf2ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manaf-assssin-muanst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd820a46e6ab146a004d83418c9f5d93bf372279b318b5a9515cde0452ec455e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musnisdr-nauyt-must (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a9afa706b18c22ea26ee62cc439d10126e1bb49b63deab615453cdcb43a6896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tear-sdas-rc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06592ce6521368e96a3555daaff61a284130165ba775edfbcd0eaee1c228f9bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/husada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b109c651e524c5b105d85798f362d052e5604037f9a592ede2beba8f979fd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-ot-uoffuto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccc7cbb85379f36977864ca740deab577a88fafa4f461ee602438946930527f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38f3d52b1be3433610276661c2f975a7a2872427c814c8981d4956949f89edf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-yisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31068b15ebcde648c5be2ea9d780811c6b89dd1ab9b5c2d21b626c2721a0f41a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dba4db6973c26b1da0ea407e28ab522d989279ceace82ee01e10feb52dd518e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0844b1290bcd3eb9e6adbad66a7451204b87613a59595c60d119fa7bc9c582a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...