MAL-2025-160423 Malicious code in milaoa-mui-nastu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95500b0d12cd3590d3072de5df5036aa8a0512ebf37c245059cdd73f9f1b7726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157547 Malicious code in kentung-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8dcaa4b5438d26c69de4057260e4bc92dbd95c9ef607045fd0bab4aa438beb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otginaaf-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e27f3926b41bc6e81e59bc4c1b1054f1b2dfe50e60dd4a8cdc881602d9b741b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a99cdfdfc8b142af37931918f2ba69f40db974d0a1457d6a2bf9388ca0fc520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-mfuf-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df659658d27aab462662b989a6ed90c280dcf8e6316ef54f2b86090b10b78ef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lot-bisayuam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11da4680596b327b1aac724f0ce099391a7950b459fb2fb4d5f9d57472a55684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabia-aligumafi-agoubva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4253ad6bfd812fad6921c793222810f54d7134fe00fe19403e8e6390ed4d9d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ksoffgad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a6d119abe2425de6b6f3e54cce3ac011434c9863d88ab9e725e4a457108bc40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-unofagoagi-gamoani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a064df0a6b4614d3eec5ec727ac726ad17f8278f8066feb1382e993f698be2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-gsswa-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc1fe6181ae3f1e4efb6b28958b34cd6be845aa299deb89bbe527be7691e73ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-manar-nabsfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f280391d9b5fd08b34dee542c098a277e6dcc451bcde4ee2c7cc2701be910d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapafovgfiaganaao-sagfa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a421f82914212a9e195c19b0b04bf09620780955493a8fcd51833d60bd9f1db7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sordi-naidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e15d60d8a7682bab033fcb7a90f45d802f80de22c0993de5a6ba343ff9b9a42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masan-ofai-baivula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca002ee442459b167ebc6fcd7a7a11daf70524426d1285094a9eb52aa024bff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igamino-jimgugu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea1e5ceccefad3485ca4748d8e3375565762866a0547e1ce51fd10eb9bc1b042 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-ai-ups012uszxgiek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8c80ad4a729ef151488051151459434b477fc3f2e327b030ed477c75dcb256e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/gupuhsr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5358c757adf9ffaf717bb2b42db05144986181c27e2d690481110dc2c789614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedr-mindus-buie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa5b14db733ffd9d7232328dc5b5b3ff9e3ffa4bba6ac0cf24b35fc3d15cf1b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33d7a1bdddd5e12eb6b7449bd811298aedbdc47611c87d90529a80f63b28f820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mad-nut-beligoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7fb809b4793aa087e08c279bca8aca8e098b35265912ec35a96525daeaea7e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...