MAL-2025-173057 Malicious code in annneh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1766a954fae5723d94fc5416a3a8848e8abc1c5275bc03cc607e1787d97fe0bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-vsers-bgtd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c42ab10974cf39c2d2b34948447cd3937533971263d12f6bbd30f28e06786c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avonf-ahpgaafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8d69d611ec05556b562cf760c5e7394c9407f87d0422c162d51e60f927a5b19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahuar-satidaf-fa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 885de369b9ee31edad3e43af69ba0b1c3e96d4943c59da9e51bcd1c225f2bb7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e227733bb1b804041553f980927657a110528a0829ae163d40a3fff5329b8d04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a949e936101973237e88fa075705c3421f852baff96b6c33e1823414404326c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditu-tufabm-dibat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e980c8dc7a879ef7feb007e1f498fe8d2edc90d11ff69aa62dd13e2163f9773b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodai-sunabi-cufgau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dffee8f13020108d790bbb63b323d515ad7f4370260058cd132ff8ba15f5cb54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimi-satihu-anga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 240897e6bdc4d665ee24db9e43be910b027af15f7d4fef70b7c2ed2965372906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rintono-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 055212361d7434b48e16a99107cb5990a40d5cf34d345ae7f533f55b6a09c01c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nui-gib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35407aa54e601e5927e46f90cd64cd7f3c09f1d9ed36d2957ba8598b120aac94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munuafai-sufanif-caifs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fecad32ec7051dd4e420484aacf07e23ee54163cdab4b6b32b35b27ced381892 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminamh-famaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e9eda6b5410d677b997cf7ddacba4152556329e848059e6a1ed8d02bb4d6ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-ngafsa-nubf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 606bf643c968bb5d29d00ae1edfc2a0d1dcb8966983dae8aceca91879a34c2e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munufafai-sufi-cagasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4194358ed32e2c7855508402ebf0d072887e704da43da9e64e610a2748a17c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogngh-agagian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e6650a00219ee8938efb569de8a348cca3a7fbabfdab4ea06c16d6cecb1c8e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/esdsras (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac5d78566a2584bca860e34775024486c14a65a86cef77acd75ed49bfac9a0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c1cf77f95b79775613ef79a09ade1db0ef5e5ff70848e013ee4e7516cc7e0c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-kontol-lo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3de69ff5e6770b16c2a517078521cdc420e32a60646c94ced87ad1dc4fdc146 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f73cbeaeccbef84b8a1c93604dbef5eb7d00ba1acb4c73a7af9bf2f97d3c2706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...