MAL-2025-169464 Malicious code in uafaru-tiut-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e860b3df0cf13d9e6c80f596f4719cdeac9b5d1e3a176582746e47f6fec73749 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6287610bb2197273311326c2d681c944c2ea76fbf15f0eebeec07c9bd5ad2615 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-coki4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01470df07a4a8621fbb548477f208bcdd1888f0b75cec9996e0651eab8d7835f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dfss-nduatd-mulio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a09382c84acbbb15d7fa9b15c63722ee9a6d99edaf5f91ca97736ee93bd05d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mundyas-missptasa-riadya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 045e1c9154407c4ce12d3082abefd0d77ddf691a7a6d25a9680db9258ddb2cf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makani-aiba-ufiyvaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e6bf73fa730a8e399d039f80407f0d7681100d369e8bfef5fb867ca96a446d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/sasdfsda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adcd32e6ea6182620829f141cebbf5b9607c4f906187fe84fd2c7bffd1d4fe01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lukoi-natiba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ba4eb472fcf69391920ce33c528fbaeaae10e9ef4de739d9dc14f75411bc2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nuyasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3622a572a2abbc86022fb7df5e5b328d71c86bb403a0b35c643cbac94e55704 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0de1ca6916c71351b8324c4143e4ae2667853f8dfaaa584e01c709d9e591b96d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ertacssau-v-munchen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8097cf011facebf56071389f8090420450929e459124fccd67f3057d313f5b2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-aius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc1526efd600e8243a20dc4c0e8593b1b0b58668f041a3595d8fc085884515a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angin-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b9eb73305040baf22abebf80a5655390dd7954286189866b09f8567498aaff3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in asd-nufgttr-nutry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdb6a039e3aabfbed5a52d6e84645d64686cfd1f9c2883cf61d837d99628e4f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/ad-sfsfs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb212a3c250aaf213eb3f6419bde4ced72a310addd394c9d58f9ced7dbe3c2b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e756d0c4f74d88bffc9c94453d4072c2bd8ff0f62225de75c7356034ac62b4bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymera-butyas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7bf2cd4f7b823abcdd0dcaac7426e7fd2049bfcacadcba5bcbc9110d70a152 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-golai-januga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab292d24cc71ba15a188080c53c3633aa3afd85ea65285c680843c1c78b1e774 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 802e82e5c7c58bd1a9d0403831b9870fffb18f71ece01a055a235f44350b2d2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cd0769cac0a842fd220e0e01e01faa7f8cc1e51330080a63eb0b94900f5bc3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...