MAL-2025-174757 Malicious code in hokage-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4424e8404da671e20f58b1df67ed3e9a2f3923b9edf1b88ec65f8514ab92590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ulokia-jakaloakaanaoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87980d855aeb11f720046e31820de86bbfdda4142b52be3ca485be5f9c5797d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbobna-gadaaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f3caf63c8edf54b45117abc1292466f42c2f7a48b21e60b4c42ef413512e0f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d910a7e1f352e495ff1101ad587743b13346bae6efd489fd0ad923280505a6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaocil10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8b2b35a3a5c57a8d122dc8d98b49d14638ee9bd5f528516b2ccaf5438dbf208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-butys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e12a25594a1abd9722dbf96d2e93cb834e8a579eccfe48b1dc075bf6037d2541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamair-taqaibbog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 168b6e3c5caa3685379c145995bd15f8e402253ae55cff21d8831bd01cd5ad2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodai-sunabiu-ufnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 919abeb13f439cb0b0b82faf738753e174f82537710f63b50e5678d85fd8d08f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-aiafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45aa9522a6b67d814d48d92af16282f64181dbd20873db7e96a74e6c812ca169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufar-satiaf-favurafan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 332f5337f87c92e5dd9db0a1a2731229c9958616050803ffeb7e8cea68c479f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-sunia-naf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 365bafb23361798034bfb6f4b9790f91fa1f4b6d7471b3ce674592f99619cf62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thumbi-vs-yunit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 932bc33c6478912fbedd1e7db522bcd4d2fee122a9ba408d810194baa4563094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodai-sunabiu-cufafanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cc8acef83378cce599ef6b8a9a3cc21d059ea6952302164b5e465d4e5349f50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-pzp-putrad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d34ddf6c7aff7ccdf6b5c216bf7467244ae9808a418545f1acc6cb2e386797 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-rich12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d82fe0925755e8153d04322bec697ecffe8d30017089f6d66e1c40c846310a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a040e04e0ae6b7bee72a188f12635daa44519630da58e99584faf4e064473a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-iutuzp-nutus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a17ff398e28b2ff3cfb532ef6dafe7d236c9a7b43123a39e121629521f759a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanabfir-sa-dafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 003fb1ca0a92d528acf6a337896c86a401eca7014dcee1adde0c0858ec319d92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-pzp-putraad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6def70595453667f13b8778ed51c73baec38dbcbaf7c360d0fc94ecdbd810acd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fccba4b6adc0f8e211ea56128d253bae0630016ccecb3432a559974a2f0558dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...