MAL-2025-150022 Malicious code in @mipta1/ffsusid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48aa7ea91785ccbdb53d0f39fcedc3342f0a613fbe02be3eb5c93b75360bab51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/npr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4777cbffdd78862fe785906224199d391dfd9105b90141bae254a4215924eb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arhani81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03db4dab919514988a13dc5d5983454236da392f1d67cec3554afff18ca6fe0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhay-tadufamfia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9bf0e0a89af464c8d0c150be3057008a45b195d5aca804ea6c1281efe3e818f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e25ad5e98d940e6ff708f24d058ec290d19616f5897bb7990fa999d7eefc2c5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manapf-manta-nurtasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dffc76fcee5291d4bceb903ce6da92cfa48e5eb6e08fada2a734b177aca341d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mans-manapa-nuyad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7015a89a6ce12840eeae31a97331db758c6fe4c7731ea7e779785f71908f9532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e82f9c09f8a2288d14ec945617cc8e8a4096586968e45012f0cc000a9de04c24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-magfu-gomumia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98ae09b64dc4051109dbe462e5df349a6dc05abd6d026a4f64e1ea819e3c5fff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abang-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49b960e8669a42a9bb30a9e304cf4edee9a51e7a5e8a97c9a0873788f1714709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d54273668e19d662226885b00cb43d4b7d8d35244ed1303ac5ebbfee2424728a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd726e9c3af490c3a28a890c174032c95aa3f61e1ed5a728559998a2a3a1f915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-msua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aff54bdd3b9da82d706b47c7402ef2fe2e93186840de93a61ca13c234dc44e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 454d3d0d6d5f842d4c82e6795470f4c212f8b5d09b75d5590f7b442d8a251711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muyago-dafaaiffuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 338d5ac6267413e08fd88c59fcc14b793f31714fe91e1a6bf4f3ea8a34e30c3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-teadf-nutradfudfaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e93a12b75585999709c7e2498878dfc07041b0cf96a9dd76d96537a20584f1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-reborn24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f069d97a567c8f076c2212a2bf2e4c39b413727756dc3382f47df240ca7c03dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-gaasd-9sas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6092559de832ce7cc2cb815286902f39f9dde14405c7ed935ab0fe7aa1f5590f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lot-bisayuam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11da4680596b327b1aac724f0ce099391a7950b459fb2fb4d5f9d57472a55684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-afiat-usuafar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7faf5940b6c1f76704ead64143180086c73b8541ee470eddd76cecfa1c8c29c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...