MAL-2025-175711 Malicious code in kupaio-kula-jalaloki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 806b2b0825665bf09ed43826e2481be074f7453e5ede8ac3c070aebba7b70600 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmih-afafiaavgg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4ada34e0dd1a4de9b0c4e9436b07a1948c16d71880a7312b07579ab0e7f8312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adaraui-buya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b029f38dece8b8389b6a47e995330e56bb0396f50767832022474ba210f0f359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-sats-anin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf05b2ba21931f51e4115d3819edcf3e45acb94b3b56d3f97328892ee6c3dcf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gigsgb-agagaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6c6971b4c8d4c2d57d70260807915891a191adc65f9dfb36a51795714a6d5e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 271130b1aedd5d21f7c2554f62ba692e5e5094de3735ad94e23504de9dd5f25c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namada-kang0-taion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a23ed7f653415bf8940b1e36932d02ab3aba2ace5c331dd28803184026bbfb0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-favcai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89c78f0cb26a0130cbb93fd1b602bfdd57de0a8516f3aad0216d8f512653b795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-satu-anain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101374376c660db9dbe9ae9aaae19814e27b19b7399631596e4a08892caeee63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapio-samunu-maivavma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 227ad8db1a0fa0861b6da6aa68723a1fe77abb28c7b2525ba547f2b143521dd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe555b36a254e4bf6c76e57148fbccd56d93ebdda4a9960d18d11d7c85455645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dadre-ahka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a39fd2cccfdb86eeafd53742cbc6f68cf1c1973d9dfb4b8100540efe905f03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-ka-ah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecf7f6267b37c98efbd0660b3ee843369d4227e14c6304d8c8c3eecbf7ada296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miusan-naba-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d79dd8b02f19c034c6b39bb40049031245ee4912e3375fc245321a5f628afb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suninana-madibumovfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d739bcc459f5947fd93da8d464a849b7b1b59e534f68e20fc49f009375848d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghh-faf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45ed6527df21401d710e4922c3f48b3944e90a3a2c8a09bbd13999895328ed00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kil-kokaii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42f37a7095b8e842ab370b1baa79078aa7c8cac6cc1f1f29cf7b3dfabcb5b26a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke111 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f315f3c6203e88dfefa369f8ed9361f28b31751946ef61fabe537c0ed621b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanufahuir-sofai-duguat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce3f2baa8cd971a9bdde119735f5c3077e6c0ff6c83253d70b4279f4680e0740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satida-farirataf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f710ee2cb2475cd17546671f140de0675b6708e384b06d5a014435a82821e1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...