MAL-2025-165782 Malicious code in sau-naki-upsidalue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1f724686b1d74bdf614030eafb6921169e837676506a6c28d377a1d2d6cd24e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manttu-nuyatassdfi-muadfiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ce0e954ddda61a75619e42f6362a5499842c7f8bb20460405b712bcf12f82c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lki-kopanusnataiabumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ab45c651dd82d4a6c351f96e1d013a9a0dcdb7bdfac020e7857e33575c7b08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyua-idugaat-dau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82d783a28b213c4f57c97274f5b399e82ce5d9175babe5d4da4f5842b7da5081 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a9f95acb254b4e83d0fe36dd34a254cb94e4fb5f63a5239c51b55f26a66009f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/sfapar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e725fa0f31031948720b92564f3014451ff0093d18ba4f60ae9ecd84054f961 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ee0742dc652f93735573498a9ddf8b9a7cda44ef6bf8ca9005833d1b4e7bb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da376bdba920c465454ce4ad3af0780e29142d1dd3a25bf843228a2accbe8d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bintang-tea41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0a681a5d31ce2cbf9c9cfecd4c65b7b8c5a2efa3cd32eb2286087cee958cbe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiba-avbai-ayub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0da0494a93c84f079d44b3fa3ba43e1a0dbd4ad6484f8ada49b085679d2f75e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kulpo-lukafhai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 796048fb315de96f5cf9646bedb3e5d27e6cffa7fa6805e5b762ae08263abf74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-aiavamoba-iaviufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8878884c88d4b09cf4309493463054256be9d1545e6d1e5dc0ff4faec4ad6764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in piluvaka-kaialbu-nunubai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b18bc536bdff35c55b0c91fa8f435d737f83796be7369f3f511591f4ab6f712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jimmy-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0186b4f64d2657660cc7e36038a3790d05b6a68b9fbb0c4cf292f12b81ca3631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1811b5ecb838f2db8e017ca5a29c70178cdd18bde0a683bc526409b52a45c72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igimamafo-jagaigg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 015a9381d655edb0da9f07e4aa932db8acb9450935f7f51fb817f4ee88586acc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3249937c57ae6586b65484729ab845506bff66ec30ba8d184f8e92dd31aea2a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-fragis-ogudufafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 806cdd1ce0bc1f083779730a778e92730d797ce2d691650a2f9f92e41e2f9529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-dibuok-inukuilo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3737b054f08e0939842d6bb736c74d0389c44d37b84e920ca9ed6b994995fa8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in samehadaku-msssi-usr7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04beb8dbc811e49a2969c223f19c4a295e48bac4cc23b6e37355ceeffe7b5ff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...