MAL-2025-150646 Malicious code in @miptaa02/fhgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e924b2c30ac746ff2b42b59fc6b0acb89b4679be8cb5b97f10dc0556c08c6e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161256 Malicious code in nabila-poke56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8418e59703ee5f90168ad5ebafa0ce7311a935eb77441b34c713d3342d791008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kore31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf54cf1576514f3a01cfe7aa88783a837e527f40fa1a7b651e13119a1b2f1af7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c47fbb94232009209c11dba655352953c55294c8caa4b2ef91f581c776034aba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d5b564be55ea704321725a9f460e8bb074cc8021b01cb2b761a4c8dc5893c49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kulp-kabamkuloloima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 031de12c9747c669e446611764e972d0f96c32ade52f035ea6ce5788988930a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c0c8d1369715ccccd40e5db76f5dbbbaaeddb66a51aeca40606ef2981a68e4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41bcd7948280916b16ed247e066f5729feafcffa521b0c1469f45f5fdced42d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-fianuia-jinanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5700bab68c73a2f399dfdd0c5b50dc351fda84fbb5258a8d769b99d3f81dac0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13319880cae03296b3c5c8320aaf8e397ff0373a195c6c9f79632499d1d2506a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abang-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeba76b3f734b47a24293de1635b3cc45bc0abe766bb6f9823cb9fe0625488ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabudaa-muyua-bgagfaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a06101f3624cb77b79b08e940ff93107150343ffec13411ce0e4271f30d3e42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-butsya-sdn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7b03276796c61711ead443b46a2e243e0e3a057e1815c2eaccab923331be7d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ewa-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d916e5e606fe163704b45120d764cbdf6a50f0b2e73477f37b414bb2e5441160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c81d9326854e29cc5dcfa0c8769148e934e2a664529d187c7f7db566182f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebe654f7863b260d7b2fd03526f34e58ba42907104c36c6f3e054a48ba9431e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db6377e1794c1849fa8628890544c68baf073bbe45a7235bb73cff0b0fd2dd06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d747aec6b17791f31424ec2c287a5855c567e7e4e50b4b5d01f2198f8bc480ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bufpani-muisufamyau-nau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80f7d793e5fa18ca089350d5ea0549039ab272dfd8d317c774c042ba5b17e5cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-nutra-nutyasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b055ba05ba5c7f0cbea9ed05886264a77899fe3f976b11b33dc3d77f4d2254d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...