MAL-2025-170733 Malicious code in aimanraza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca3d48e32de1a4749a987a17f4d60d468a2017b04565ada02f1e14452f6001a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nanali26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd9af8aa8860239eea73f6e1e367dcd4739f5d81d25d70c37fdd41e7521ca87d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-ters-brunei (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf61a11963254aa3db03d65d92a6ddfead9c0936c766b29475340b1f3e9ca38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nea-fofiri-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69e5a734580408887236177fc8ec2d72da69467980978324779f5dc66996645b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 274ef0cc6614f14d93608b2ea2bd39c4a868d069b5c5d9a1ae7fca26f43216cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6efca4862fc50f6957185c0ca3ac25454d4c7d3b7c03e00f04c2fc1a9624f3ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73217a023d768f95f412b9038471d820d3a2a17de73b2f95d719e81a33ffbd06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b97ef8ec6f9b31e1f787cbe8cb9f8c53d8e594c5a37767fd0f33b50b69347843 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagiaas-figafomka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dee32ab66895715af169c0c15bedfe2b110e87d5a26663eef687a8522060e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iomodra-forufai-agoauapai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6892801a799d764bc2ff5ad8a41b86e30bed3e9922bfc6535c9ab72af642a63b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tac-malasiu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a1c7bb6417c41cbde8f9d3ec78fc412a9c2aed9172367af4de12e3e1ebaca84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92fd05af9377942022d579664d9bba636434a4f6243f041437fd16e47e171897 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nojdsgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f89983dc8bae92873ebd93e4ef872c4893a5ed9345cdb4880a5df2925f2ccfa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 511cb62763996f20d868328b7ebc9113e13652ad0dfa6cea9852f51dc71d0635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bintang-tea26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3a83b25370aae18bd1d76736daca18ea30577559965a0cdd920318212c5becc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d96761566b4daab91a62a5db665ad4b81c97c2156994e211aeee0d917f1d24a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/irdsis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7998fc2a3b80c790febd333588245044351a06ec14e1742f7761d719381cf78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-luuki-vilakunanami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa32980f6445ed8537f8df2cc6d0b36d1fb434072f52dc113794bc7ce1d72b97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 521bbccda9207173a05551016ea24e45fb11aeaa709f5f218c7fda9e9635967f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46b8791d3f2e54887d38df031a4dfafdc8dc118970e4464c5c2640020103510e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...