MAL-2025-171947 Malicious code in tariqmacaron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cefa352c6f112e00d9be0ac33a0b088050ec25b7818e6963fd73169c6d65f10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5a0699c53fd66ad45d4c9e895b0a025da499c5c945636e912a05fe450a07708 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff7ade1b95a1dc5bac00e225f00f9e3e2976e8fce17178a16239cebef441c01d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibopna-mobile-aramafaui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 443d9f589623bd18be6a6ac815a9e36d60129bc2c7f0ffa3be96cf1ba648c29d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irashi-21a-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6786b76f677da8c9da2cbe2b6f27a02e045f769fbaf9b59df8594ab1fc826179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-fras-ofura (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8e051fe555ec9cbd8225aa522f597966e602441a34185133a72ac9a036fdac7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manuak-angi-gu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 993c6e1b0052bc27878774c6f8f555053471fa7db0691e1d26d702e35a888016 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ec4202f2a7775cbfa561cdf1999eb84f547e33c7ba5a8a5cd5ca114429e4477 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-kalimanjaro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05a12f4be9517e63f7aad09e927a5ba3028df13cab60b0562a9ac2d55e14427d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jelek-rasisme-batu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9f49b7c7919ccd4c635e6162aef746a5d90ae775905b6a242dec623b11dcbd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/asdt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1034e7e1d0f2bcd82340ffd6f09e731136c5d495fa624bd2575e4db2e452c382 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 040e682bbcd9f4d60aa1ef05276381150b3eec8105361568f73a0ce3541e1f67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abibua-mobn-atayuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bedd96d2715661aaa49689d87eb26e4671045f60a9f64325331a2ad4baa8e6a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-tasdsfaa-ta12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18736c4b84221641da7dde1d7d2777d9ded6282cde3f42ffb7a6be9baf207ca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a20bc84703c8023a6a14b802a969749335cdf6cf7defbff1346f5422d0a4cbb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e86fd22a2bde0c583ebcfecfb78a356056be75588edef964568d1641111cabe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/dggfdhs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 825d6508528d004fea0c43bd5e8c3a8666fe45b18f36fdd9bab90a2030acd846 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-alaki-malsfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 584b5ee0fa367fe86a5eda6469f6dfe5dafae4ce406736ef6ac7fa7475f71bf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-mioliupe-augasiatia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f7686a3ae737cd765bc619795171170547deabb044bf223d66d4bdd01d3b54b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-aspsszas-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 908d474b7790cd2dee5c7171440df3c21f20d996690aaad4fba1b94d94df494e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...