MAL-2025-157749 Malicious code in kuinsu-luki-kntuomolagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad3c720468613d93ef77ea3ef71c82f7e824d9678f0efe9dafebdb4e21335480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilang-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264f8a5978a7ee55d9091e1b917bc0d76e71f055a618312a1555e3b0efb00c1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/tx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d358ac40d3f2a81f9ef40f1aea21900fd4670fcc3ccbe6c2a672be3138eb534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea962b43524f0de179038c7597dec087561ff7b20781b425a5a49ca84452cce6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd56e4246f1638702190d3f129902655a107f56f088b2be75caadd5fe053c1cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nustar-miuyu-nutyuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a45f89d2e25a2ff074fc853720e02afe45ff56166c0503699802e17512740bda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lala-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ca7a7e634fc63fd4bd57658c656a56df86630c29f30e407f45a4d3861d76a03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nuati-espanyol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed15b52b9c7a6a67715e0753c1d315fb748833f6bdfd3214fbb4b8d63e9c3a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotma-anfzi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 645a0d817c0d29e1d758aa3001efd4998a54c6896641d83f9a11d5b87b98e9f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afi-famauog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a3a4a185afd7906772598e7d305d9fe16994e3660e6eb5e1c6b5c3db3d5d380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/resadx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb3ba2b3ebb7055ec16592d0c86b149db64be19799be95256c450b2c0391d17b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-albiko-taovilanaiban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e8b0baf6ee34742d7966fab79c06880b371896e67a06e22a11dfbda9c49a1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-uylud-vamuiuknauin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c4cff555665d0e9c2de9ed277ef0e4de2007ecb2435dab6061c3d20627cf21c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/tqd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc02cee55f7997e2e271fa79db929ca97fba3c98e38852f2ad6567583f49d09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderan-udilasuisak-vakaali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ad4c76e095d71704cb7c54cd4340f4dda288c44097655a81a06b1cf65ed6c79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/iynujm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cb8dc8d6b589ad60b2489859ebaa21a4f7c7b4f814d2c491fc040b10eb5cf08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fasak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 433e94799b1c6b5dbdba37dd75ab9cf202fa6b10b2d29e34485df876ecd36962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scior-radiant1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a79bcb0b23bf3adbac9a67667f890826292dfb56abb1f4fe1df12ba2cfc5daab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bd03c4dbe48ee3b5debf52480047ac9b9c05db847619649f8f1c15108bc9b7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2880460aa2f09af6e9b591abbc48b933f496c0151d7dc3b7a021725a56c8d091 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...