MAL-2025-175863 Malicious code in lia-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8d8ef965116ace02927665b7e333e394065b9af084aa1f25738978c1409c5a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-mabaafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3298cbdb8ad8dc83582f94306545ed8abd42b3ee1025c452c3808d30aed23dc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kaiso-olaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f810da48b460d941c87035f35ab3f59d8d0a23d60549c1582b05a9400d2cbab5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaism-lmiaor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6544f7387aa7a4902c57a472c278c991b20bba92b97a25f4da38318c579946cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nura-suytif-dagibauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 024a691d456cc7c8944806057c664a9b7d802d817e2e78411e8426f2269578b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bafai-sunabui-cumigau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40bfdc258618040958f5103da3b5372e707c2420149a9d8031f8f1a1bb35864d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-da-rofdaadid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c60cae2c6f7f33a98e921aa58101a939abf1809de72a3ab7c1a28bf8b51a284a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hakim-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e9010a82557beb6f7ed3ee3174fc9274018af61693deef2f4a9edfe038c4fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke113 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c585913fcbbd4a54f657f18f07b029918702d1635dbf0da2d11120affe191b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidta-hauli-miadil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c8f65df6275a8bb2e224e33ab28f426ea459d45463c261af176fc9a653f7df8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in annnnuuuh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2d1b6aee720d11bc7543185fe38104694c2be31ae5f4fac6fe79e08fc1b7edc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-id-aiforxa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00beb004d2c44837b7feaedec8e4c7c47611b649dafd0a68cb836f25c125a0c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaoci3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86ad29ee13539b2fcffe030cbf0428e0bf313ef875f8463dd8f121bd2110f76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogahh-fifagaffaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 169370b2f69eb642874ba44413e65f545d5c9cd16cef4ac6fe05f9151c0506ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushina18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92242dd1ada8e4af822ad9cea019ba62a313a664a23088f06a9bfb975c97a1b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-verxs-vrfs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55ebd83a5ed9d1f5a24932c91e819357814dc446b62d420a6cff5e385382cd41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avgof-aggifiafadfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 869f876c31a26eb190103f7cd637c562d2b7c824f2ee8dea4363c135e73463ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in god-tumva-diabilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f71ab4e0cffcabf959b0ae0cbd537e610b97dad9d30a00de905972d99cd0a7b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-afsfafi-dauafiaaagfif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6abc7d152912a1963cdebddd04976d04acadf9449b50339ea11917dcea90cc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tryui-nurtyu-acce (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b900cb82532c867e1014cc0f6fda61c9b241b4700be250bbd1996006c127d60e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...