MAL-2025-170154 Malicious code in upilka-luzmu-kijnugijani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a33e6e194a1daf94fd23ab3c0bdea5bb801b382f3fedbb773fff8df20529037f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-dibuk-inuip1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99a3aa1f23fdd17efbdf6fad64722fc1197ccf503c35c67bde79bb6b8dcebc05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 717d9656081384ad393f765d516aea6193c14bb5f3805bbc15ace14f37be55ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toyota-cir1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baefd6517fb200b18acaa00bce2d549631117a48208595084c3c15b80a3b35e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-mibon-aguppabmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0b6ccae464098f5ba20aff166a47b6d28076477690e488a04bae90dd3c3aa62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e48ea330732be1cc4dbc2553a93cbf5d6667d8105a56bf6969bc7770ea66c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iba-otana-umaibtu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5106e92a2e7f3ef4c75b3ba549dbc05b9a883d8f17ac911f1b658a2eac1ba6cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaaya-s1a2s-ra2fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8236778c8615620de4a8fd529e1875501204af5a958c49547a0afc4749df01f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsnu-lki-kadgdumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf671fe8e65ccabdc0ad6a8ef24e9733dd97a8b46768bca0cdb9525b3d8de3df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/nulll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1959d65a2292f8a74ba6daefd72e2513c39f6b99ba7309f886a75200fee9543f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bufpani-muisyau-fanafufiafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ad7df1ac5e1af5121092fd98bd702c578cb8b2a8f3e6bebf6126c30fdbb0520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 584de99315a3bb8dc3f6a2c946620d03237b2e90519ed69bcb3f0473e520eecf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/asssx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d75987858e859beaee7edd015f3621b399418a0a0fd66bf056cacab71edf31f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/pob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f77e51168e10ac34beaffa6f0743196c2845adfb9ebd8a9db6ca6ff858db46b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke137 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5df1432fbc62772bbce377a8b5d263c00df4f26961a9335431ed024f46e6130 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupai-lukuta-jokablabiokai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34df0407f1bd295021df0b641296bc723ee0ec72b58049c77fd6040971171d2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-naiman47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e9680ae3f994ed00f35b7d9f4d02f0ebc4b61f305b83d4ff8bbde42704fc9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-ain-itubail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3467491c7f09e4fa1e4fdb60a438320aa351e957348285632b9fdf7e2620930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abia-avungi-agani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ac42cca9e1b4033c1c183307743d8b5d2cba0fb9ed4a19099c3e9cf13c0aa18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-mau-namai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db1b9f3f7497ce3436e9089f31cfc70f839c88d6697a30e1d3b777b9ac0ce07b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...