MAL-2025-179836 Malicious code in lookingan-jaja58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f77ddfc78b2d8811a1e18393582e6bf07f0eb9e7fff56c885d9577a53ce607b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abahhh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 602e48849f1fcadd67cc936c1224f1c02b89d86597a80bc84a35d6db826190f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-masdsdage-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector defaabb1c7901eefd7d4037aac1949feabfc14b8d81d6643a96a2c8c88bcb6fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bafai-sunai-caiau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b8363689fe3fe66de6c957ec225d86f8dc3f8720b93037d9d78d4fb879d5f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-gbbssoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f3702893b3d7d3787dd02a08293f7ef5df747ae8d9c1c20bea851e3f4c059a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-posiy-iuy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fad04912d08c50eeb1479501bf0d09e2adc52cac77412f74be0578de9b5952a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kulka-jalalokioja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80f6e486fda5a9076f332dd9cedb0033c9f4c33cc7b2dcfcdda6a89f65cfb7d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-erws-biuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97b81c0db03be571d22455c273b39780498e50e658343f5a35b7de186e9a85d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogihh-agsigsfifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb721fdc2444d6ec501837ffd887df75f6d6712d0616213bb946e13ea5ff9fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ten-teh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52f4cb58fac5cdc657b07ea20dd13edd22f01143cd324632fafae9a893d49072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-yutrs-yuhgd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b275341dab4dcfe430b41170c9a5e3ec45a896a58498e0588ef476f46e876bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-nuatapdata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c13c6f9617f31fe4dd2e80151b2217ae8eb0dc9a6229260410763239d2dff43c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-iutup-ubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8363455a61ab1e09dd7d5a86bd4f60bd24802a66af6443d7a41120a5f74288f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah2-miftah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ddfdefc03d3a8037fa4a80ce057bd13a00e478349e14716f74554a205a89ce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodaini-sanuga-nut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 997dcc2b1a12d5b75f21bf644db5c1c1043376c9ec4d6cc98b957a878bc1e880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushina30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ffcbdd93e85e1f2b3458175665981fd4640c02f94e29900cb5dbb86439a144 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aaana-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22820cd817a4ddc8afff9bd955eb57358bce41bce50166e11b45a940ac11bf64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-satgob-naigubis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe67475633b1367286c13d5b40429a37099f0394792157dfaa074e5497047c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butray-mutio-uytnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18234247a30047608fd971e3f0052c554c69caea78b99627bccd28e5d932638b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanah-fipha-pafasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d9f06b3f181e2a3ca3c284dc5414d1202963f651c639cbc546940461ee4a868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...