MAL-2025-172796 Malicious code in alvino-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6935b7b43a0ac0918b83c2a0fd29c8650bfcfdffb9f87300d4b767fc5e4bb4c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tugai-imiaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03e044740d5cf0fc3791d42eacbbfb6219a98462816a9c2da9acd1ab512d70b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmimh-amamfaoja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 639a1ff312c5e41dedabfa22bdefa905dce9279c27dd0432829bb46a91b5f9f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haruni-poke117 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57d343cd40b4e595bd395b4c6000c711ab4fd4e7ba8e1155cd3cf7e8aff66367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-butan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b560155a786406415f94fedefafd01e00edcdb81ae3c49837732ba46ad724bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-yunik-reus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a2e4e97bbc76a9647adb2523857ca8caed56ce8425c605f93578c149d20398b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fs0boiuna-goaiaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28b2ebd12b5e5d4641ba71d8c84e8a1c3c55f662bce18008ec5214ee2b98ea6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-gagasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 221d93c3576b2b362ebdf6be16fdbf0f517622f4c86d214925d30b80c3b0b67e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07d12c359842dfac1a3d4fca3922ab0315b09b0bb686123da3bd0debf5b4b5b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bava-madivv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a422af15daae6caa4e6dc105bf429d2f022554f488a8e09fa5c1ac86ebef40e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21f2f31c93b002c37d4b0f07b2586549c04e5da093ae453d71a6106ff5d89b6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-agiaaihha-aftfsafyag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 731cb319ae91af385bf8c5233eb079b263b169cc48ac3918c1a851cd79971fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banobfo-imufaibai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b02743cd885e19b1563c0eef601754285a43c09ff163bc2c6e2395b1f191e73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suinana-mammva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 205b4c311d06a2a295098728919a40bf62def3e845447a256e1c40eae8c5b5eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namacida-nutayayafr-kadasida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ba1849552b278d6dbf6af5099ab5f30ba0ae760f97f1e40164648cc2f8293b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurnua-suif-dagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c286ac10a3bb5275d2e3249099137000310ea6d208a78b139d1ded5724d3aafa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manais-miopafaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec37d49b7a020e14e74988e63ccf931cce9a6275b8e9d02b19c31d9d90d91dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaism-liamkiaayianor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df1a1a8026bd1dd9d4e52a9011349978a992687a99ad363d3d24f0e367dc0461 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keke-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71a153189a746ad67ffc8aef0f3480c4d0b2a12eee97e18a6deb0af99a095b08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurai-sutaf-dada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef81260b40f691cd7318c7d0e3d02b15f31174d3edb2ea9bdc3daa17097b6b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...