MAL-2025-181239 Malicious code in @akunsansan0/biru50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26e3275292e15a314ce58373d38e5ce5d0e5e4db69c9a9d6d82c0a1d2797014 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 414f9c3097af79ff4a621b1e013ee2e1343ea7c5a8cce8d8d270f72c6703e78f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baab15766e116687af36b69a4da587b3a3db3aa44736b4f3b3753755fedb1ec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nanakila88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4f6874019f7c07a2e99fdd699eb1c95df9461f7dd03ca5744ba2428949ab7bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-ille (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a771b5c0162fad6eef1f7b59bfd140cbb973006fca2fc246a9fafcf96b1cfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-ramjak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2095c16421ce579f4e386ecba1e0e8702d97973855e25cb8028b42b1d83c264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-afncg-avafeuacf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7406ee9b60910b8534118c4f52e59edbb7c28b82d9ea89dbf5700e5bd933b387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anais-papmoa-ymoiaogia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62d45ce4e04b1b7d17191ba17efc78ebc18f0d2c116a523445e2b7893df64e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-py-zowo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 525bd12891c0dc0405405be428db5d2fe35491a3a481d1974042919e59353834 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-fafunig-amfia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5295e23d3e705ae40d28decf746b543534eb203b88d2f28f3dd3d45de0348a45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nanakila93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f75b65d5658121d90cab9073f180064d9f786349b965f5b15f2bc93050f45c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-wuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3007e5cc1f099c2bb12ed40bb9141372efd22b4b0718d006e57c1802c4b0dd4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mizukiyakane/andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a90db93e707b727bc9a67be13b7691efade656dffcd3799375f8455ea979b9d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-miloipe-apompa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b6a0425737f8a4821fb503ace63eae4a9c71d822a4bb543f83cdda4f1fb22ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-hupez (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eeed786471a736c3f207e95db064deec626882e45d10fd1dfe2db1579e1bf4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bookingan2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4070f9e4952962b8d777521e20123a623b5a61bf68c1849cc8ae70a3d6b2e37b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-tagfeh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc2dc8298b8d6f058297910ffe347cda09102d829eb7c45323a40e6b5ab49d43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anais-papoa-0afui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ae2dc075a8c6ce2a8004aa1d98c576dd52b8d97b197950ec2dcf8cb9d7cb6df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-cici (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53508e245c73c8abbe60b0ce3127b07f93c3583034ef88cc871b4e1dd7ea13a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nanakila41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23a3e781d2dae1c1493f158976f4194fa70c816ad4e0027aab90423cc419756e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...