MAL-2025-170777 Malicious code in akuuong (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 374639329cff2d34fb2c42d21bf2e2cf1f108f52344109d0658c60fcfa79ea2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mohamedasif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 536193c0c71b643294cc1c166c391fea14761f9b5c03055c08326e99310b518b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedr-minus-buipenajara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebadc9e2924b32a42a9fb94214c86dcd8636cb385ebbae61dc3d32832cdc7b3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makani-aioba-ufiyvaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8af9ac507b5a3980e58268ad44db59ebb1475aaeb6abad02ea93ffefe938c477 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutdaufs-musiop-butysd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 623c155c37006b0b95b1fc0b6d87d9599d4461f0f28bc214e060278814957173 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6be57b1fe9eff229d23f0716fd00dca397bca4d38e39b4911663eca0b7ee810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in analusi-pafai-asuia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1540bb8f8ef55e42a8f39e9489ec1e963a81dd28e7fba2ad5831651f4bc15b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudla-ofogiari-agua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 898ccb3c946abef07be65c17fdde3faaaaafbb05bddf1c9a12faff3ea88e2973 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in finish-sf-mewt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb7e82112ad1c5f40949b1f65e1e04db0386e5d9d24101e4d92c41c012b4817a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e769815889f68c618f6a24f91ec402b2447fa0ef3ae86522b4d7c8142c633a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iqbal-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebc635cb08a5075d60db428d10d515fcc4f921d094635a833884e0d1719c354b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-treua-tazc12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969e5bd440734c14899b862bee49d851fac31af4074570cbd5740ab5e2004689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-gagaghg0fhf-gafsaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f6f1046cc1d9243cd18add645ed68260f7b46196c43f608079dec908a80abda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotumafa-anfufafaz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c6b1ad245b69725e4a2a29d273ee876adfe5a36aa06068bc3339ccceed3d1e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b2ab2be9789d244280d90547c5091d50c040b67e0cfa2dbd68818eea746a835 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cb998047578fb3425a3d3ccb32196269a1d659142c0631f8d088611c5302c4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sfda-muradaiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d2b6b9d9fd273040100f70f5ef4c6715bdf2c6464b5ff9f2be66b53a2a34665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ac9cc89701e3aa125c8324c7653937291630743db1be59a4870745ee2e84d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/koad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef4ea1e5c258bb58ec8ba4741c9a2292d912fad98b7327953bdd433248f964a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/iyujm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a829f415466c5c479c972f6ee855bbb2bcf23cea6c15691910ea6e2fa0770ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...