MAL-2025-177173 Malicious code in nuyar-ida-radatidado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d49eaaee947fd0e1ed02e6445459a1499502aa7d7c0632959485bc54dff2a742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koko-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03a951b7d6c9342f4e7e291705fd7506aeb5724fee4322ac933b48e2129ad8d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognboah-agavofagsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4da536623a3c265d8b62cf8cbc89e15a70df8c53595fa45f34e0839061483fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suninna-mbnaaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2a8916311a930a7eaaafc6d0663ee53479c559ceeac9461def08da571f4a31f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gisgsgghab-agagada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c12975a1a185257995b0ad0b81687110cf8335a6abfcef3db9245e5ef73fa37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gigsgb-agagaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6c6971b4c8d4c2d57d70260807915891a191adc65f9dfb36a51795714a6d5e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah20-miftah4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45e7d5478bdec906bbed9777aa196368650614af2a4731424f3d6df2af78e433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahnim-satafi-anjifgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0cf490372235c2d670f481d63a58780b708b0a1a6f1cb29ac4dc462ddc33a8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in savihotn-safgdfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e261ad914ee49ba5502e5f40f9f86be17d11f96f88018a4b29ff3ef8659f923 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapino-samunu-mudavdabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 577810d541c0978b9da886f3a13b69854110286665c7efb104c872a410426fe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbna-gadfida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4408b98f27758e6cd35ecc48c81e539dbc17cb3d9b7f6090b2ad481501983f04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in btuis-suinana-mvmva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 122b889e943a038631c63a3e5a6ee5c9080732e3fe760f7667edf39c82d14199 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bafai-sunai-cumau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a69365981fe8f56bfbab0fc799580eb3410076d349e41439456e39bd65b42d25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodaini-ngsa-tufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7a10c445363302878d658e3883f83384763b4fa8ec40838489066415fbb5233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-safafafi-acua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67bae6aab557962a50fc0f325cd053119cec85717715e25ca215b33cd0928a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f28986d18581472d7003d0db35dc8ddfe86dc78819d932a2c920992f901016 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutraa-nutr-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ae23211f8bee219f6193015edb59a59970334b01d55b5b5b5ddffb6d8ff4063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfi-daujuhasiaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a05430be80f39d1f148bec0fc212c046801b955fd588634f463d66f8ee706b3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah20-miftah9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f56697da57095663cd0548141c713250d2584a9e0e9257d990df7f7d9f7a2e92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-masidsdage-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba10be60ca8ffc26b97b3e546e9026c5a57d4f469765d14e050b56b8ed4a636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...