MAL-2025-171661 Malicious code in nitinmehta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9b3b7b55dc19e8322f50bb96b45d83f5239f896210432ad61723b70ed5d676c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaaya-redd-wfesaq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af5877c8e68bbf41e7ec47cb8ddd7a1d10ceff55e1f228fe7e33d3b2d94ace8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b340e5ddd46157f3b8a799dbb2b55085d903b5ef562d48fdcd2a3e20a944022 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4512b8c5af4e580259480f89da9da067e8bb8ca51f60a0c5467f96b65be37d27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/edgr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a4bd34d783880affb80a7fbb13902e490b0fb80c2635f558b8cefd73402150b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51caa535d1d1a0073f281b951f0dc7797ef9163c305878120974b3919a122427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33f8d55b1a2fb509d6eaa65f3c3cd9c47070c10c03b586cc4c323bafd1e22012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c188ac62d82c2cc91adc3a1efdde80d8aab97bf5ca39abfff08ee6eba35aaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manttu-nuyati-dyaqsdrsffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d9581bf5a04f4ed133f4a91c1cbeae828e0b282f31593c8ab0c126332f6dd9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fjgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b23cb3ecaa5afbbce6cf47869bebaba495a8591cf01b6c51f24e1ec7348edc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedr-minus-buipenajar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d64dc301f17098e80e67d7afbe583d3d9fee7a32aec85178a16ab694631a2788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ajus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67fab0755d795d4220f358018a006f47dea0647281bcf3cb5bab00e6ed481e90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli148 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fbfc60aa6794665f1cc64305cefb9a3f251dc149b30c08bd4a19b57d07379aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-dok-uaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e50e8d7f30614d769cb201266beaaa36608e7b52722c3f75afe735d8ec9442d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toyota-cir13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4c19929b6c62929cc9235476bd4e462faf6dde3914a28872024ac4d788c51f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in man-nonatai-agm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25474cf5713cc62193c98840fc3234539fbdf00c46aa3b504914aaeec74386b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b7f29a7dde1c6f4ef64be3ea78e8e752d5f404fee821e5a2c21de5164aeb6eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igno-jimg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a727ea716c6db03d2302ae2bce40fab835b2a24ac80e1a099ce6bfdf58612453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 735ff2d7b82f0f0e6d53d362ae561ad6269ffc94207453fd930ee50cfc86e66e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6056a08a270c6fdc3b1dd56d4373e56ba042f334e3f82126260307cc54bdb26a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...