MAL-2025-165658 Malicious code in saku-aiu-unianuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 736021a08efdb61ddb4ee45027464a283d33492f8e305bbd2c2cf14fc47c00db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150720 Malicious code in @miptaa02/idd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2df6d8c2013e24e3a393c6442f566c084224643cc946955cb52be95058f0da9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/aisx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bbe989d4a3c83e6e120123cbb4a8dec1bf62fa06fce9fc4764788e23e484735 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/dzfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 998f35b4b1c0fc862c9a748e6117125fe0a7aeb6c86b76bf77ed0981fb02c573 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/rtamyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 013897a464f991475d0de33a9e6787a066e7ec91fe9b5e44d45b8de8110b16a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abang-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 265a3ba2a926350281bcfac9015ae95f6d67c9788f16ba49a0b6fd8e413bf6c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abeh-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85a4afef2a1e396c5099e6296a1cda1354063ba7602ef08280d2ca823cdddd4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de46c69de3a267e4dd9c309eb368eeeabd5a84859e0008bdd9b4f199ba1ee58d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3157d282d8fb5f3674fc5ab9ecbdc2d12df4bb3651d74ea73f15dc9fe582f3ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abyikula-nioybnali-lauyubauasukia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64174f2e1d92048c8fb792c3df9e2eb0ccc7082c6de64b3228737c07faa8ee76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-milipe-apuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 982ee7fc52975e8bce216d240e3fedf3479491f492d1de8730996ceeb9dfd2aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27dba0c540e6bbecc935b6bfe63a788ea9ea7be19cec00f6d570fd721daa49a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagimas-ofisuoafag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781d420bf8383e3e433df55166ffc8526523be67b23651e54ae3a972a1ca607a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bufani-muyau-fafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74e7463eab4f4da74990a9fa849ed3787fd7ef5b4b72a8050cf853c1c999ad72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4344a0258a7bcb4dece17311152b5d214fe2aeb5d7ebe3ea997f7bd77d661984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-sasa-t9a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9e2050febc595a12a920c98451b7b61cda279b1a61a64f259b8a9adb84a7a3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kulp-kaboloki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10081f12a3739b7ef59fea47217f68dc3469266d228809c6d7847bb0f1bb9d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0561f501d61ce66087d5134af04a2c505a56de2557370d6dc84ef1a35e927dc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke151 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f1e863812009a74e9569d88f4581d56514644211eb4abf7428c36ad711a78f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26dfcffed7d647a26fbb9eb5dd116630dd9506c911e7c6f6adb3ca642bbe24e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...