MAL-2025-179687 Malicious code in kisut-faifg-avuffigb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4438b4b63ff3017045435551971e1cde6815fc730473b4101c372650c359ab65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvnvi-bodadfgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22c5941530280809ca37ac109dd1f6e10f464fd338582f43253ecc8dfdba180d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hopanud-mafidsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8f08db1d6fa9c232245bea8e84c8ac3d3d22422b52573b246476147efd5cb91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogi-gfoaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 378550254ddfcc310afa6a0e207a4ead8c11487ad3923a8f45b065e698dd98b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfia-diaafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a33ecc489d486f466e37401162f17aab8a595a2f81e98849ce014e8789588f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-gbbssoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f3702893b3d7d3787dd02a08293f7ef5df747ae8d9c1c20bea851e3f4c059a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kaguya29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 292a67d1869e8964fd432d1847ae061621d1aa9e37f3f6cdb461bb69fcd479cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munuafai-sfnif-cauaguis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a2dcfa533539e869fda587ee4d10527f4e44fa000034bd8def7e86ac204659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nerfaa-ndutar-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d3d01a3fa7cde71a2614a5e34db4d301f18089ed01d10aa50309cd038ae1377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banib-im (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b78a4b4d47e2dea035868c5c1ae44606bf6ebf3e17f0c5f3a0df53b7966c204f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-nusafa-ni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d98e3e6b7d92819d5a6bf0ca44e167cd719f92b3ece4e23516a45ed30090048b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hds-matsafiad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa6ada6388662f490a2050ff622a031c46ab947cf8ca805b5d717faf7b5911ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11915dadb7fd2ea8b3cf2db29c7ee2030f8103547522b56c5dcddb5a0a8ee305 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-datdfadsid-radafadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b814160224ab6ef5a4ae707654cca0aa94d8e4488d842c904d18c13cb79340b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avof-ahagopgafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487ab2cb3486316af4844a17aac8e7649ee53ab375fe7d47869c6082055a0764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soafadi-vnnds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920d25ce683ea4811a23d44f5f9554e3ca21085c5ca5ab6dc722d2b7b415518d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-giba-agagaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb4ce2dd574a9e6173ba00f2b4ef060fd293d40f24c2374c9977307fb21ab9e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogi-agcgfkaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a64f9a139c2f1774c6a22890be9df95c8c610a0e55edf6d92201e684e619ffce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaim-liamkiaaianor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20d7c11fce8f1d77fa5c58207079b003d65d035d7b630f77aef6cb6b7f6eb888 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inul-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5e934514b3a3fcd7033495058ce1a2fae86c1e3e855107dcbefebb5655f4db3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...