MAL-2025-160715 Malicious code in modirai-igono-jimaifagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7e72465aa9bbdcb11ea584b99737462cb0f8ed218082850a8c860204a55a27f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd29e5f5222220ad05f3f6696481297953fe62304d1a7cef965948dbee79968c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-uyilu-vniun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a44d6dfccbc51f282572062240e4dd552f4c34a4cc48494aa756ead7907720 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sdda-midadarida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d4bce12c18b51986d96c7addf4a4d2d461bffb2b9e0f35c8481197f6ebc450 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagias-fimoaigi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6b37634e45ff2d75e7ab2cb02585cb6ba524e07f15ca75cbacea94760de48e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 545bf23405402bf08e2f9020d239e33ce45c0b7ca18492ff9ffee07d48feeb53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-deta-tadc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3943e742139f789e145d4992294ea56597aa49d6d75ce9f77b75c01b3176d49c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e7eb55b07daf335a2f75e032e4041c32e8b2e6ab543d1da7398861843d462ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a63275f8cf6b568f78bdd9b43df7f1557add0b45d97fb967f5b370d01fc81b2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namase-mew-baukmwmek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6d10c15a05281e4313d4b1b918c32953ba2daaeca4d075243356ea8dd721947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f41288741b796dd8505ebbb21f7f5e095f0476b5ab46da091f95a7647cda3d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 146504a69ebd3f3dc97a4976f2268db27b464079718103ab3a3f9dba2471f7dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ed1c8316b68e72aa26895c6201cbae3e15557c236cc97651c4410d32138d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0f93aa6ae25235e2aac03c92b878b9c15296abb231c79555a2f25603f6fa4c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28d71b717986e2275bb3c17c66bab06739b1f2b32dad9bf2cc76738db3de062b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1003521e016ad84d5306966d038fa56fcef3e074e3a00e46d6383d10ea7f549e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0ce3ab0e51f4212b9deafadc79c41fb13a978ac3e0cb2c780ceaf5414cae3d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70642fb94c2d751c372e12f5b055135170ce017bf72cc3554829b73a69abe3da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prayoga-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3367423e9af8b13881873c62fb3fc6f76c1e8c8d960ba2173bced7f1825dc704 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/nyas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1a9827e9709f4403fb6cc46ae29c538de2030fcad5f51d1f7c6ea0cfb00f515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...