MAL-2025-174978 Malicious code in ira-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5c82cd57eb593f063a58d8aad219ec849d8ee9dea84ea11ac424d212cb59b02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-fuvafavi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2afa8e155ebe4ddba158d620bb6adfbe36025661c47606bb2e90d896febe24f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurai-suytif-dagibauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5eae6425ec6aea67f4a0cd2cb84f00630e2b211d14a84702cce482d02f75028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-miftah1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12cb3fc65310dbfe3f4cd20ae266000d8391b6d2fabc15a449a2cac6f5c7c5a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2decd97377400ad637367b6f6408f3773374be6e7147d41b9dced733146f5517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-haulid-mav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d05c892affb08516a8330fec0fa422d4c10ed20ec68a0130dfbdccf44c30ad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gas-ndutar-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4282f66e3d7c86b429854fcee401c31f4351c074e524055c4de9593632995bb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-satgb-naigunbis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2841cef15f952cf7d6bbbf92f16af26b04ad2a96149d44f1f924bdd5f42f26ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rintono-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17db2c53af2049d4ee70883dd8f778d8f97996fa18f912d9d2673cf22c4ed960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-aagfhsfia-gaifgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b59ff31d960a0c023ef55b5a2479243d24c972a75090ef0b99e0a987076e107d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5060c41cca6c804cb4917c4feed29e03e7deaf7090e704ebc42b79511c47134e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gibogaagia-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af4310a0d69cd5441dd7d88fb2ffcd5adbe241a5fd07096c352fb842ecaa75bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-sat-fadabidantu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34e336141c7a8b6d9d7fcd26363fbfca4d7a28ec2411a0205027d6d9107541b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1b6afd20e1fad0c68c1daf36f568008a1ec546d125013c8d358cbe314e11da3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuragi-sutaufia-guivog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f4478bf819eed7019fefb4afffc5e52761be76341a2a7106797018be5e0d17f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecfd8a669a7c3b11f9b8627f77655b671af843b680dcd7984cdd34a43e22318a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gia-agka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2060cd934a4842498e0b82eb8b1bcfe3a3cb2ccb37519752fe7c1cb358f8233a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84f59e39003ffb0c2c062504959af4d91a1affea7d89504aee02a6af99eea294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tryui-uturu-acce (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff52e0f3cad480a824a668d0cedeb21193c6deb23e26804ae8a1da9fbad2e7fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saya-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17b584d18291a7308efc32edecabe7c52ce8b21e3e7c26d7577b29889c2dafbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...