MAL-2025-170632 Malicious code in abdullahqadir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 859834d5b1175b0afc7428815f8dcf0e547a28cb7676ee7dbbce6e4f440284f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 824d99b828ae275d75ea74acde2a97f34c6966c205cec9279f0ef591ad5abdec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/tadx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81028ba5d18a96f4520a7caa5ef4b2f2135bcaec90020859ee6e2acf28ff59ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-dana32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b880f64ac3a0fc6f52ad59e9535f724ce67c13d99f7b2ce83b6ea8c8e82dbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-dibok-ikalku1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac697aab7c49567dc8ec8b29a3298a1d1d9504728ed54631621a6e87b50dd45b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ticul-biuyaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 988eb6ad7547010b0b23fdccaa7efea28fd9ae78e07e3dbb97557fdfb8532199 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-afat-usutfar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e93424d8acd1dba822da9c18997db6ac753096e1873466175249e244ee89a408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciaiaggu-idatqt-fafugofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a34fa15162c58e48bec781281b2c78e9426b2238b097de6fbf0019d8b1fd53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3344de29088a7882ee60805f6ef25d69269ffc07555fd65c4aed04da03ca9047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43a7656844e71cbb0117291d942d529dfce370ce73d2f46f198386aebeec4413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eabb453b72ffa96d3b7dde58862cd957d279424149c57dcda5fef31d7bb7d7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otoiman-igamogaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56374199257305919f227bc80f04720389e897aa9677abb748f89dea8707290f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftaiky-doll-partly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9752d4e909c55aa087b0f6dcf9283c9102d05fbba86ab4ec5dd865e75dd7e29c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8016d9c7c83e6bb9e9160bbec58c58ecfa0320a4aa8bbfceaf31f7f9e968d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutrasd-nutyui-mutriao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3047c72872dc301833d5a0db7c752459402abb625392cbf4300c29aac728aea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f93478ffdd5fd8ff790df43556190f9af8b072197d974a2ad70ccebaec4b2891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bufpani-mau-nmafafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df8acd7280a499bfdeaab658d456d94962bc84d5bbc35d0b78ba27fab1ba1a99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-amugmi-amanamu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3487261a2a6d39d90a7bb981974b976d41c791f93b16ba38148ff51a50d98a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-aiga-fiuafuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb5f1772b57095be54b7e8b20ec490cea58ae844dce7e4d89b00dcfa55328b32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-ntai-yoadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96f08f5b31fe05b3c9bd81f491283c665ad90d95fff7303675be371df2d79d67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...