MAL-2025-173489 Malicious code in buta-fs0boiobuna-giodaiaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c63867a3eee6c3d837b327766615eef4a022ad8f09bbd27ae85010eb7984087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satidaf-faubs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dccf3863cd5c31a159e563803f723afd7d57d68d0eac9c0fdf912371523030a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keke-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a68d3ede75dd2560d76f90104b8fe6981a3553755e8b4983edf85995ba1d363 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagah-agai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c45ea69a9298df1308b797eeebd91bc2c4fb68413f59bc86145af882d0839c91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-arash-verst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8108380b85d815d55e6baa9303daae329006eb69c66b707d64b478043a8d69c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 617c5be40c41a009038742a8cb9fe5444218e60805946dc081a84d3c4712facb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awaaaaaa-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b06afb2570282a837ebb6664e95ac05a6ee8de9c3698a342d4bb558f0aebdbcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamir-brdia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 870a3422c44565054bda1461a5871b05632650ad3e87037c68415ccf367e8ce1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manais-miopafafif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30634cb86813b88c2ee9e4357e63a13e3c1450eb22569fd1d40b4d072d7f9d30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaoci5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 426157b02f97f1d5957632904c226e5fe63f26142f598d4ed5a9774b439b429f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df4559012861ebfd35e1cd77251e4325f12002416536dc8804e14558685d1a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ibhaghsbo-sgdahsdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 425f66fb02e17217d35bfe0711b13e6f8c837509bbea10b16f0c94bdc106728b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-butamanam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5063935f5b855adce73798eeeca106ce8a50740d2a2e70b1566011c721d2e59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofgdi-gagoffagfua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2d34fdc4976978c41d3d54a8dd9f82fd442efc7d17b5ba0eef03dbd779d023d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmih-afafiaavg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6490b458ee71e2e8d5f527dcd9ddcc6fd68244f5be18f45d72919bc20f3c070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-manhuat-ma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81f0525418d50239c21527ca5f52d619b19f25bf84d8a3111dec61d7e5e7921d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de5ae048294cf56000a4e28c389197a952d8a1df44d83e54b546eb8d6311f64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akkku-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a202d93fea7d5321d8de6241394701d737576f7931e60c977862a12e502129f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99938a4104c7bdbfa317aabe590359fcc288489af2d1b95bf3cd7bd0931d2d8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-uyte-buddtd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44c726ac1c977048b9fae05cb36092a9b5c37110d83650e563cbfe0177b8c5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...