MAL-2025-160586 Malicious code in modira-fuhopia-janiutsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a150b5e83b7dd62ca54af6cef77ef98572d99c5937982c89eb8fa2a50dba2c93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagnias-ifiafagaag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0b3a4d44a8260711b9c83657c80531b068969adb2703fc81d707dc1a1ccac8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-lady46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 160ebaeadeefed821e9fd58e6f650e6ec3a74096a53fb641d45b88c6c1da733e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76e0d06893df803fa3139a5642b2b1eed340a596c7c684f512504f5fe3f48c3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-luzimu-kinuani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ec2b94c1d58b5b80a699f11e69cfc9a80fc7b61f59b27469ddfa0dff5f0b45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/sdfaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06d0692b2f2a2b309add2be60b1bb475327fe792e5ddaeecb0155af2643a7250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0af3e0669a7f930e270b69f4af0621c8e3e309816b6e512e523c119cb48c80c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a47d6f94eced05c40f45a65e99d584e3d93db92e91f232283c04c55ec3d3fcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibona-mobiule-aruanaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4463e3633ddb9dde0d0bae40a7d651126aa74e6332c386ad5aa3db469ec868e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bintang-tea10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3558a38ca8792ac9290ba5c9afccb526035ff969c684bd8df45f811f9d094d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-diook-ujaik1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ca66cefcf73e91886c39deed8ac3bfc8d740e34e29082a2617b292a4ffa6852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in t-naughty-nubliesp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84e11e66fe284c711eb287567cf0d80a6b5ac9783fbec275c9c641319fe1c19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in samehada-fhzhs-r7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc4825f4098a35e733f3e3d1ff172e0cded812518249ef2d844a52b61ecc4e0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5760ab3fe05494491bb29a94c3256f1a24c4fc2615f9cee2647fe5faae4b185 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a59bd6bb2b3aa6186d6affc401b7b2314692c304e39f47b2dd0aafbd368343f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ayisali-gans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c26021d7a29aadb481e139baedd02ff1badb0b805f0a0f8a2ab28610a6e63e52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afagis-ifadahigaifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee1ace4ce531c2587235731f2f65b643d901c2d8833973e586ec0e3bad635a15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotaihmi-klsimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f5cd24748ef6189538d9c38a32f6464456407fe4a243d99ec264c6af113bd6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e8bd75327a2b4a74dd26b3d2098d4ded009339f42d7df14007f4cdc2c747040 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scaior-darena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cff1893d5c8a1428a97ad4cac4f4096292d5a6a97b5adc8641ba784c15f20d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...