MAL-2025-155754 Malicious code in hariyono-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c400b3b1c17350263e3bf47d4804b88d833c51224f10b125a586f55b153f9615 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4163aed1d076846452617420160a0232586dba57c0bcf855fca81c1b9a24bb1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/txifdjfx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d015564ca461299ef9bcba78d9129c4abd59bfe7f2298a474bee4f80fcfebb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiuba-avimungi-auugatoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa145a87bb5732be3cfa08662a50417527e1ba2e507b08a3b8bf58855250ff9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-kalian-bautka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46322f859da8e5ff94b522ae44367ca3d88cea6d6d6f9c9b034783bdfaa90523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gurs-uyasfts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d3ca6c67f1aa210d8af1e57a4e421a1b02da9821bbd06a0c6884c81a57912f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-alaki-malsfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 584b5ee0fa367fe86a5eda6469f6dfe5dafae4ce406736ef6ac7fa7475f71bf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99afaa494e07d7c868417437d54c1d0db61f2bbf941caf6227af55f8cdf61f8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80b3a5b3673e56190105951c9d7e5cd5792f17d46c41e941c3582d2973536e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/ride (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6586a478d709f15248513e510049c3fe031907feba316a825d52e3ce794a6dd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0781effdbc14ffacdac7f2068c547e4dd052870e0c6eb50ee2c2549dadff656d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-taic-busauna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d39c63373ebbe32787746fc06593d6be06e6f3fc99ec21eff8f35cb6d9e3dfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-tiala-monlai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 429e4820f179fa7cf6ceff951cf70dfd4f67c3e9254eda759498efa80c5d588e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/gfgud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20331b4e8b3e1fee147b146ec83ee644829abb423d33f1b3ab356bab13682ba6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arjuna29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3baee7f7842c37f83578ed5ecc56f50a05accb576bf7b27b56b2568aae888305 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-rahaf0fafheg-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd4ed4e2b36aa13b9071d0b6ca5b25bba6c79a4f22cbf8a9b1517898ac046cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0f44b2fe18154072f57fb80443e99c12e770f1ed828577bbed49381c73fc44c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98ae206616658b902f72f65ec12ccf13cde1742a822e7069ac5cb13c162cce7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da2784eda8eacb69cb9ceafb09edd4646431dc84f15aecff5825fc2bb1c3a84d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afais-ffafog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45fdca6adb02018b0dfbe5a83c9a4b6cbb41ef866d32d07646982f6d3f85082f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...