MAL-2025-151466 Malicious code in abiuba-avimun-abp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d10c64c43be5290ae758c71393d97ca3fe87255c522000ecdda06f6ce05c10f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anaisisulah-paufai-asia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e43f87e1b8a05aa6af3e2730d54bb53ba50f3aae51ad1abf2c98575ec9024e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedr-minus-buipenajara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebadc9e2924b32a42a9fb94214c86dcd8636cb385ebbae61dc3d32832cdc7b3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c53c53bcf045efcc92da7db57ee5750763daea4e7320b72a5458843d8e3448b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e2f2526242982859670747762cbbd49790b7f7c27a961cd59b06d11f6a1bfca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98113579037909070c6dae22777de4b62617f7477f6c4223203a022ec5299405 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5a08be0b8bee326ccb3ac7d60c1170b498d778185fd6acb82285a107083871c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutaus-manis-nafudatr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e98805c33bf1b395c67955cc9f14dbb8f72b6584d2e7a430d27ce89ea38686fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0067d0979ac754da23d0881822512bce45aaed904f66872e76c7afc03b6e6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 759aab2f7f899405d715c33607455102e716eaf2a7c6fdd30b59e11f37837ba4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699c3a3eaca990d64129e2a898e940eb9f25843f97772616911c2b825921068c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-mises-bauyaidaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba090c978fd5ead4469e02e998afd9149f0e85de92b303a8b28efdbf3a73685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagnimas-iofagag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2d987b6ca80aa72cc13057d85393408d991369d817a09c675160ea90cf4aca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afgais-fafdfog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8366a894bf3abacb3fff7133e4502b4a5a05d3cdc8734ac170d1887b662d1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musasiak-butsd-fat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 065850a5125e195a6162cd4889878cd1971912e157158536139c2075843a4a58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d91c0f3e3f1a9a3f614eadc1f2c281101c150afb9a75f298cbef921633f1b9e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igono-jiomgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de66b62b01ecc84e4c299a3c5026b7f859ea8eab7b5f329229657521ce7a09f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b8aa37340bce8a265f9d630e2f9d6b5daf5bc34366bd3023de4a1e991ec8bc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-dana37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09b207190f9bf5d26da0e7819ebdc7f8225c93474fbead2a0cc5e65ad15b0a00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losit-dilabukabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00cb5928bdf89699dad7b731e337a8098b3a403cf2ccad19a8293e77835d1828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...