MAL-2025-175635 Malicious code in ksai-kiloa-ailolioia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a443d41aa1a0d8f02b1ec88acbabf468cc2f8d664a3b65cd4e1a506b57a239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kia-jakafafsfoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f20a6eac0dbcad01c7397af568f281cae2c744e3529015d1a5d9c51dc859d6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuragi-sutaufia-gg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 557975972d0e7fbbfec1d7febad83028449c512b83dafa183a8642a6d691d3d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvnvi-bofafnvu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cb44980d843215317f4d26b1f2328b9f284f756f14deb604eaa210d1dcba54c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-gagofofgasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7b7a8a7bf64e8ee49984f3760dab243823d758e22975e76a2e369c4de34bc34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nui-giba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector defa3b4c4192773458ecb145b354aa356dbb5781e5a47f8fa27382a078a8f25a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sffoi-ugaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce46cfacbeb8c27973dc3662b340e245f635a027eebd30452de67dfe6a401a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koko-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 596df8167e09a8fa7f6c81f63e65b4d1686b8d39479f4b6b638914347d63754f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mibaa-minfas-msidnsas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 525a3e5c6603596a6d2994b601f649da1047b71e47874726f7463cda2faedf64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-reyta-reua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c646a10c2247f5959c610a20de7ca489778cfa1da01a9e452d90e2666a10999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-amair-tabg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 203fa3df2200f69a962dea028f08c7a744109eeb9fec4121439d96dbedbce748 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 844b5f666641fcb7ed1b2ea33ca38e07cdc4b47decb13da81bf0a6f91643c237 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tuam-inapyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16929336f49a9dc9aef82c748455faa22ba1c46b49039834c0840dff1c1bb173 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manyeraru-nutar-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 746b767a262c446094c126ca7a76e058514edb46b9a16332b36a04de94663dad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afia-gaifgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fb46ea62cadf53033514053c49ca9a192a41444409e33cc145e674194e48f3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tutai-ivaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8f9a6f8b1db9613d0ec28ab34a227644f46c69e2f13fe8ab41ad5772b14ae69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-sunia-munaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbbe96d990c0c337fc3a1e6a3eeaaf96cf2f9bc325cc295b5980bf1926c4f359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irfan-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76ad71113d08d3ff352b13d10631fe5f4ca4a366a6b7806934a20e48eb1ee194 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimi-satu-angifafiug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e43d7ee49599817a92afede2c21da2e44a3ef9e6b09ab08b58ad5e9335d96b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-satiagobifagof-naiogis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50ac5748d1673751e31f9ce7c17bc8153877a816cded6555ee67a2a95f44485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...