MAL-2025-176341 Malicious code in nokire-kushina20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c5b751925aadd67ac64b31d63ad1be49f2bb33dfcf0f49ac514df151d9b808 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tearich-ralat2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1938c51759e35f1d1affe6ce113326ec2c408b2b98cfcf05b95d7a09956033ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagh-amifagan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b71bd7e36522ecc6896224eda96ee8f2f0228f1195c4ad82cf3c7c368ecd273 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afa-ratofafoafavadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 512a812225f6d78e2da11a599f2aed8927a17c2a84b6f972adf7db356910949a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suninna-mna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 632906ba6114b62f0307ce58bc198dacac9882cfa8f365486e42b701d350a4ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soi-vanabdus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac6ed025ff8404821e1f3684303079187c8f2b9301b3dd97f6dc68d374e0c0c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapo-samnu-miavva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3755be58145b8ce4201a3e34e6dbd6210e466aa122ca14fcab314c63c8ea47e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suninana-manaado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc375e0e00dc268fc6a9d20a9d6a010c822086482615d3357529b51ea7ebb5d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mufaafgi-sufuafi-cagasufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532de853dfbf582529d2638c1eb5819d3e36a4bbeea8855e81c89aafcba7e57d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiyaa-sutiayanu-gandofi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4d7967de0e5d42dc44d53f42174283a413f20edc99b4be625fae38b3e1120bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavia-icavib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 561cae21e70c6196577eb61b244134f9a3b554d4fd456be1ca4248d81002e277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teadod-mipta13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3ff139ae33dfd26b124789b3ab13bab1906077f2bbb3b8a77af34a13143328e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-ngafsa-nf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d56343ab8082bc0be4f6097ec2257b3fa3d8d3d993e02fd1725b7b03a142b82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahun-satud-fador (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7827c6bff514af8fb11a7fccc663e7651d676fc774de98e443ce91a518bb4e31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognboah-agavofagsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4da536623a3c265d8b62cf8cbc89e15a70df8c53595fa45f34e0839061483fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tearich-new2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0be4cbc84f6574fe74a684956af46bb094153ce4dc90312ecc84f5a06968614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thudsdmbi-miut-uytd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5042b5f747df7d082250dd600ae0441ed5edf2a44c2a9f6c9c44fbb57ce16b13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tearich-ralat8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ec5e052f6e6a8aa26a735f0fe85e82b79debf01b612fa99e1bf4092257f1e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-fafisa-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400414cf41562c8cb9fc308e303ab1823be7acbf0921942f62d4b40cdd812bc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghh-faf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45ed6527df21401d710e4922c3f48b3944e90a3a2c8a09bbd13999895328ed00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...