MAL-2025-179942 Malicious code in lookingan-nanakila125 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1a3b963079e9e2d2a4d50398bd359f5ab9eac3642cbabb92021449a8ce09e9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-faina-agna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34883a86cb57d47d7df4f39f703cb68c9acdb2e31e0602ea578e3b95ec12f4fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushiya3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3b50bb7d8340b9455f9d8266c603c40065507afd1fba5a1a0d77e4d3fe3c106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hopud-maviddida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8a661f75086d2ffe558614526e7a5ff357a33b96895f0b6d16330792b67518f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rubiyem-must-butui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a131a9e8f6d25882e958085629508d5518253fe3d036d0335ca9acefeef7c2ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogi-gfoaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 378550254ddfcc310afa6a0e207a4ead8c11487ad3923a8f45b065e698dd98b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugab-ivabitnfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afdb4bce660ad163112ef03c3abce4698fde196074742df68db644e4366036d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afia-gombafga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 261b4a2608617be85241edb506a7f498deae530877da7b540079d816de5a9a36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamir-baerdia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7742cd56904016cb43bfa0ee3ac736a0f970da74bb879c60a0f19c20afbfc4ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21dbb996eda096b19884866bc6e7322f1dea32e72bc1de78ff1b5be9ff101847 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avaim-rasiian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 810bb22a3585f9efff4bd077d497271517961b3e7ebc3d409ee096aad47b33bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f9fed38df503030261b51a536032acfa3392c358ac29c08936c1a3f0bc0c534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avonadfifa-abdma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 519a420027c89d5133c89f675c2629c7ff7cf876d92c7c022dc0077aa4c6a2cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-vreds-reft (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb0ac7dc155bd6b5f4ba1d4c751c296dee4b448eb7b1609d052062178d89b682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inul-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f0b5019a6ad38cec306db035c49b38f4d30db0f9135816a3171528f0c200188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-rich16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac6c64f81ddd2f6c56d12af1675a689ad8e335b42aaf272b16000eb1ea975c1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72bdd4c17e350af42e23de565eba924f4928c4e24640dc4e6e329e8394314132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in savion-goodmun-pix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13e4bcbf07eb1c5317d5da644d942d6a42a3ffe32041f02a9a7bce9dcb2ff8ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-freet-redt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb1c5b5bfec221fa6a333831ac3e871fb67c056b48d58792c654e46b3ad72d51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butahu-asfi-dususu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa63a7a638ddd6fa806abcff8323a00adcecd69827fc969194b9ec82899d6ba0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...