MAL-2025-173389 Malicious code in buta-fbna-nafifaggfoafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c65ce15d63b4b925c7e34e834cbba959a12a1e31e1dbc479c6ef99d9ed5cfca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manyerar-nutar-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b3c7285c98a3ff9518004dafd5aa97a8c901b334909520bd2e078f298169da1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sumpel-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3610be3e459ecc1384d23741fbf97ae9eb323d3989b3f235345373bb8a188707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fadg-vafgun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9263b0d1afac10e6bc832d01e5647b6c324cd9113036497fb67edceb089f9e58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-nurdt-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b8d23a7932e96c7dbe946270864101678820d7756e0418aeeb8a18ee3c298f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1b769261fadd7b74954ba107b36eafc384a7132206180de4c8d51d4ee15d70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satidaf-fabs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ac8540f246ebaafd0e23bbbe5d1ee6b2eaae8845bcb9dab4f2ba33d069d2b66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurnua-sutif-dagiu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 419770b26cb218c12a39175710d7a39047a4b18d253675b2846021132b0df8ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kil-kokaialio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e92822e7ceb164203cdd7b695ac57559ffb49c0ee7e85f5352403a08d392e908 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trui-tran-trap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc5fb9b0523ce77ef0043ad638f7ebd6844a56085bb34a20f4eb5e63a416264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmih-afafig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b1d479d3bd9fcd32672f5d97915a438c9f65742e8e9c381c146263b527582e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaim-liamkianr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f00134f124d7aea49e45a80dab3179eca44fa2226769b2124dfa09e5c526db8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29197907ec9a5e646f77aa49b4af9062073da817b74ee4069a6c8bd5d01e6ca1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tuam-inappayu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa7510ac1651b73c2416f6f8a3648cce012f0b2ac20fbd23617c7dda3ffd6978 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogihh-gaghaoaaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 546ac762d2188661993bc29744d773cae46df3c58f73e83522afce3a46dcbf52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-bofafanifavu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c01efd5c981a6c59a6f106160e87ce243e046d6d97bc52d69b7871e61672d1b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-satiagobifagof-naiogis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50ac5748d1673751e31f9ce7c17bc8153877a816cded6555ee67a2a95f44485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah20-miftah3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92b4eaf151548bc3a07380ffc9f5a9d924bd8909889d463bfdd2df0035006f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manusidda-manuidais-manauddida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d96b4d1b5e6a3275d9e6c50a1a6acfa4d5104592ec2dc7b0059dd802690d2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2046bdc1d9658658cbc26e65152a21ae040284ca04af748feef8f2d1cde8a57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...