MAL-2025-175401 Malicious code in kapvino-soni-farivavadvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61d26df1e1e742d7655331ffb968dd907870ac1bda890857d912e7e378ce7cde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavaim-macovo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05cc9559f6efdcbc4c48ca5c1433f4d5d1070185850de3a008165b4f8a19027c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soni-fuvdavaibova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd32218ed0331f95490005525b09dc81227434ab90aba7aa4c81e5c2e43eb448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c834d750eeea1f11b4fcc67eff07053a212a1c3ed971d33aa8313b0fab63fe0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-nusafa-nfigasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e7ea5af768ec487dee01cd9b642a79c75402088ff9d4b853f3274e0e1540e28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irfan-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efe9ebc76853d02c4aa9575bf529a7a4fdab61451a89d9870b2df25d2aea95ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sumpel-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e0ab6cbbe088003eacd39f6b9c6c1f9787a3d95023e1a9a6d449ed38108f45b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suninana-mao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8756fd26bf8c68dd8a692a16cb1ac7f3da0994bf78b9c0e9f9752595e39d29b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiyaa-sutiayanu-ganofi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c7875e917b80f15d55fad5112d285f68934a6523ba0e69a3f04666c30cb1b82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ib-sgasdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a793869be28a6a714264f0334318f2cd5ab15910c488868adc340c32f6b07558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de69e4110aae83bd5eef074ed9296c0941c22e6b9a71542e95c9a1b2decae930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in savion-rest-pix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4bc6a5cc1d2220e4c74e58ca53a905040d86e3a4f1233d12d621f2eee3b03f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-oagaffgfafalif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b9a21123728c32df13aab73e53f9bd8ca342b8f98c09bf88560550aa1e3c68b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avafifa-fagssagbaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e356ea5bf5917365679cec6a2ab568333856b40ae2552b882be50fa97ded6bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-agdaigg-aahai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f43c6fa44b69ef54dcb2f6e7d98ef3e88f466f7712b6889704b3a66a3d3999d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfia-diaafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a33ecc489d486f466e37401162f17aab8a595a2f81e98849ce014e8789588f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dsgs-trds-trud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55590fdf35faa024c7ca46b46e25c3852cd3b582271cd0054b961c2139293798 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-nusafa-nfigasdfsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a04f38d6f409ec550711418b5897f18f1658926a2d43aac13cbe6c77af850b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asafui-datajufahu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e6ebc335a6aeb3822f84a238515c2746c1737c4c151a6a2fd6fac0c3754074d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanah-fia-pafasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02ba3f0cf85371a93ebb39bf9e079a25e2453cd0c3128861a89a58705a5cabc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...