MAL-2025-179912 Malicious code in lookingan-jeje40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6e66f244458482a359d702a88c17ea3b1b5d569cdec2e961b73ccac3dbd0f43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-kontol-rusmaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0017d6fd16986fe6037f6bdb1d6d8c6eaf5ffc30f4ecc0529422113874583cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-gbbssoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f3702893b3d7d3787dd02a08293f7ef5df747ae8d9c1c20bea851e3f4c059a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimi-sathu-an (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 576cef02a062cf4eaab44100af0a0f5df0c8d84187cd2b9a149534202e67bd53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-posiy-iuy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fad04912d08c50eeb1479501bf0d09e2adc52cac77412f74be0578de9b5952a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-afggagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f23e234a00624f3b5855c63f8c08b1d5c70c2464cbf16f2feba8edece52f0951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66032abe3c6d72493cb0d392c60ed13b27ede63eadd1f679e5ba16b2b6990ff6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmih-avigpafdoaag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34a9c7ccc03e11056445b7836b7aa443c5689db817b29cae7931691b98eb15eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvnvi-bodadfgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22c5941530280809ca37ac109dd1f6e10f464fd338582f43253ecc8dfdba180d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sumpel-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4eac00c17a91df477a0361d91b03426ddafe600c485c84397b749b13b954e50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 938b68a857d6cf530ea1aa83ea685a4c1107a4b861d296e926433d5f9762bee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-aia-afaffyag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7402b0a208a3fe0c7aa7d2beb3cbbd4bd3f1966fcf0e9616db94f23b5c621753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thumbi-vs-yunita (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57ddcfb23a5d1d7b536eef4c3fd361e7cd48618ae5bac94c038e43e9dcc5250f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurnua-sutif-dagibuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a7e626af1de20e8fb3b5e12557b45f166156f289559a50ea7b49cdb0170ec3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banubt-imubr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74477d2ebfd7ebf613c73a14cdde6e935d6dc3868088e68c11c91efe28ef351d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-sunia-nafanada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fb583c823924a4752c1dec17fbd8fadd4ca23e07a03dc5f9902221d60ed302d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghh-faaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ef0f1c98ceb540238e809bc65d7fdcdc9a4e006b2772ec544eca908664a60e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-giba-agagaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb4ce2dd574a9e6173ba00f2b4ef060fd293d40f24c2374c9977307fb21ab9e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e485095ad6e8a5c37eca76b5d29d244c583184e5e92734588bc4aff9271f183a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-maniak-buya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 408efc2a1b63c139c8bf5adb71d303d29dbc475cb91521a50a9f765b9d555fba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...