MAL-2025-150975 Malicious code in @miptaa02/tefaim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1fbe1398df5e254311853451ce2be5904cd89df374b0fc0f510f12657fcf935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb82c6ce2b8f6d819f99acbf33db84a83508821cdc57a5c23351a935821b75c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-minats-addutfdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f6eabdc620605420974f9a929b6cca2e5b2b48e692f4e08be02c1a5857c14eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in milis-amisodp-muiokp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd13b436931547d9b6b9b047ef21c75d5c4624cf411bb954cc3b39ef0246e30e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fshj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2930924b90de23ef79484abf8e592c084d7858d17c94e1ebc05a12c5ae387d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ucok-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 293044cdf88d88ab9c2ebbe083f9185fe6c4b7f30a8408d8f4fbdc03687db481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/wjgdub1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 071cea5e1711c92b9e718b7cb65480e667224f331b52135aae4261ea87cddf09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab69610d8c124e8d944d494386b2471fffc86b9089db509cdbeae1b8b6ec5eab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-buysa-tytsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4330d813d8212678cea131a0d928a9df9cd9f15cf8c8b75ab2e1c0aba5ac0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke112 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c597d24b73ae5d344f93c94de6b45653bbaaae67ad8f84ca8a2bde385360239c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/tia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65eebe337cb428e149392633fb48c56118a4facdefc04c7cb3c0fcf132052c5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abel-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 301e213484256610e5b3ebdab343c1cdb8c0b373efafcdd62016e76dea44f42a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/gupuhsr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5358c757adf9ffaf717bb2b42db05144986181c27e2d690481110dc2c789614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nanami49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44e551beb5dfe2ba34ffeaca4254de4229cae4c2760bcc6f31447ff870c4b8e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb81d6b8dd6c7d4d78365c33874f63d092d72f3e250d2423106391fdee064344 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli135 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2e3dc84cdcfc8e48c5c2a8e0fe044fb04fe500d14715661f1f6b7e6f41baeca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaadgggs-musngi-mifuysts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1227f7d0e91ac98c04e39d64823310f51a714fa080d8726e6c460e5feaf7d35d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d165254539cd2bf1b52fe46aac269688f6795920ce8d503b55fc07283cd0b54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losit-bisvuka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e8c59c40d7575f825c8f670593256fc6862163cc8da34f08122075f6027fa3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-darusdallam-bruneid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6254af0e5336c0510adf87ecd1df62a025176197dddd85fc50d6e15d20c68081 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...