MAL-2025-150896 Malicious code in @miptaa02/ramyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 592b8dd7a082827fa6e72eb1de6472952a8359d63f3e281b069301f4caac3b96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutaus-manis-nubl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9d6469288368855012782123f418b560a1b32af54d458e9f400d00e3c1906a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f950c6ebf3982fbeb05e061e5465dd771f4efbc4b49ee579a092aa4505c3cb0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-ogauof-dofuafsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9fa072ba67025f9cb445db67f058fc811ae3f096c573881f77ad19108a37c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upilka-luzimu-kijnui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aadd7b2a5fb17560f6ef399638d33da8c591970a37ea3d1cb68199259733e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f27c0ec1266ad04bf94a857123d400c30fa6aa5c2c4365c67cbe7de31da1351a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd386b6261582ddcf2a3c3132a426b98b2c269d1d7bcce28885b068034963df1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15fd2547b55929c3745a2c80dc52ade8f3a6e64902ad472aef038b9e471a8311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mattu-naya-nuaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94d01b07f6a41ca1f4c88ab7028cad703daa128ff86d968afba6f6db2363bc45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aebafa2fa3ab34e9c7ff11b3a2e7408069097655660d2b817c46524b814efef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdcb2ad6118fe9163d39341496266c01525f776c8b5bb03ae0bc08f5c744a5f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ayai-auioanyaugial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ce96d99719f1401b082ee88820491cbc20acf39dd06497ac5b5e0b80e2eea42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-mibiian-upabuimumia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35577ba1c8fa083cb657ce0648f94d8d8c068dc7258e7c7c1a09088da49067f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nanami34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d952163e3056bdc65a97ad3a660539f42d11a6f94d4206bcc5f9e357e6434a34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gobagilai-janiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85c230b8e608204b8ea93faa802f78179936877b05905b34a71548f0cdd88472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d190fc7bc608ecf34ebb0e05418a906c4b9ab42be781d7602047758a4832ccfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siregar-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 211e3f9177a063a13c9de7e9f75f71b92c61d28264e4f5a669333bd6fbf4489b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-tfsddfcdd-tazc12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e35078afe41a8b23918e2ffddf09d5b6d783c2157b243f10f2c05cec7671f932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-uki-vilakaamsnaubimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d837a638e2ed75ac0711aa761f32704c0d252a3eca5a5f1b4abfdeacc6b15c2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afi-famaonauog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969203ce496189510885e71c1b43e87862a3a2b224d584e4342da435e746b808 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...