MAL-2025-160024 Malicious code in manuk-nani-ignu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5e8fe7b7382716b1bf0b9621ae66b8e13af0e095751ba51abf595205f14404c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masako-males-l (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50df86829b9808bb86afd9b4e43db7e570f899eece0e9ded771d3999f4ac944b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losit-dilaubaamukabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5724f7e26ce22aeaa6160eeea503a5e8de4768fe5101998157401f44781e7158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/gaxzxody (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cf616ad04cc24ecab03d08edfcedf9c4625148f8dbb62325e583847bf1040e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namasae-naiuapa-sosamaiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c831c30f723ee93c9ba47e87ee3ba2217cafe00559d276ad3dd4d6fea756316a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iqbal-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cad5e514a41404f3c7db19966df8b7d7dc83cdcc91a3246e5e96dac028c5a2d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedarnan-nut-bantdadl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 156f8d572b3b9fcf9e82d1221f51fc987acdcf23d910f0506c5377ddc44abe6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madan-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91d95580a2f595dac524d828c8b55ddf9df9f3086e2aec84367877bb18fdc81e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/uywu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c899a705138c6bdde90faff3fe9df314faa1b3131226298bf4fe503f71eba6aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-boy10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b985f991d3df3b7c667c16139a6bbb5e6754ac734f1f63dd30309482ef1ca27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea640cc7b2012f0a3fa3e71bda8599dd25d6103d48ed864ebee08db48ea83d2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-diook-ikukunma1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f62e39aeae04211229673eb52a053449c82fda156cc6d34882edd187ad52bba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lubki-nasunaubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d2b7999e4fa3d12d8e8eabe2eca8cb23e79ca9f0a9f168a06c2fb94820dc080 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-nautyt-nublies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 027e85eb730adfc75f5d3bf18307891700b1d9c90d756be5e5fd670417180322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab2b09dfaad015680b9b5af13c5644967c251396971f15a3ef3d78d9d77b1d47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c97d266c860433a4de42b0f1ccc1470da00bacd6754fd28c155f8ae0db5ee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c5cc4e64b60992976ec0a51954e8a3b2609635505f5de7466105d3f681ca794 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f416a4e895252327a56c24905c9ba5efd7caafd4c4bb00a2b74936127b088dbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-alao-mafadi12paaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 310f9ca0a969232fa5a01bf42e38f6d2c15fb39bc34d5d621f997a390201772b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b1319c9159c115b58f6b5a5e3010bde27bd45b9ac5092e41ba6df53c5703f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...