MAL-2025-162030 Malicious code in nasution-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d177143bc87612b026674f9eaa47010373ede73e1d6c1502ef1c443cc69478ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabudaaopa-muyafag-bafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31f644cadc322ff477e24a017d4124ae62206134f90e660dda1a61c4577d50d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-dok-uikayanabaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2916a67cc649c3c7180615f9669169498bb0345375c5fe9d2b5582aa6a1255d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/erui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5ff922556d0f07a6f7e558f4fc3057814155dd10ea4ed0cc681f0884436b59c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iomodra-foruai-jai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee8d96725f26da2059ffec91a66e9c0e48706191d340f502a15da961de25afd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tac-mhnal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe2a5c697bdcbca1d5a2cda9fe4bfba26612659dfbcd1fadce9d3abe655c005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-diak-nulamakuian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c57767814c252ff47911a4698683ca5467c135b53b9e5c93320de9b08872177f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manapf-manuta-mantauaap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 850f6165575737b8a2d1d3f1a74b6099f737765af02eb0875a585077f4726883 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namada-nurr-nagama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 164190c7af8642f970fffe0ffe4d5fb226d13c2d1ddd4caa22dbf5c6e2548d95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-gasasd-15s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1541fe161ebc2372724c04a92a8c10f896f8ebe623b619dc541cd2ce60a2f09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mand-nom-mutunau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e58ebc8b870857e3d0dfde17c1e65aa19c3ccb717004d9a70dc7a2af7764af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jimmy-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40a0666375b72a9ec0c79b0df540c066600c94ab5b9b394f11c52f21596a64ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansida-nomfmadi-munaigaau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b258b7833907bfa9369353cabb5cda1ab8ad8edc563f826236b6d22508f3ed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a282689fd839f988b785c9b3de7d3302c3099f8d19ddc8a92bd6d84756e019c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muyafig-budau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 267ebbe3ab9a0bad206bab8a6e5b33ba6a2b8bedc99285e7c6f88a5d43b0eea3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7285b883f9be075f6b98f09f47efbca3b079d15a0c962cf693ea8deac00a16e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jelek-rasismem-batu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f551f4657cc92ddc37f8a1cc9c10eabd121b1f2db5e5432bcd0e41e61ae891f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecd414a5b2af1b97487a223ffe40a54fa1701c3745cddfa5c1cd35a0532ed8dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagmas-adiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f560b972ae8c610e02be75a23ab46f8741e21a0aacbb9ca97960e9434e8220e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f558061496f6d77876c216edc44a68e774a4a8a6bfdd0614acc84f58831bbbb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...