MAL-2025-160651 Malicious code in modirai-igimamafo-jai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4910a036863f9feca32f1b2f86257e58847c1d82a033961d1aa337901306baa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73116ca0da86a13741712d21b904a301b3714a28d6b57d85750828da655b7cfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manapf-manuta-mantap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f20521cbceb786757794155840858514e87fdf4a40b80e9d5139267ccef2372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muyaig-bfugabafit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e105b14cdb0c69e4bdfae5d05ec7e3a26aaa98a2de9282a5520eaa3739ffc4f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/ryfgie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bb1b7301269aa62094330cb07ba4ee70832385dd66dd13cf3c3a188f5744e74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/wia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7a80c8c9c7bd277a68203abae05bccbab756bbc07ed1a127fad94392c0c290a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9129c6e7041ec62903c0825755b39db8878c106684639872e60fc45acedbacf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-aiusamakuilai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1bb33500e1600b3075c038b69635dea5a5a8565949346527ff1c934aaef8dac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upa-lukli-ilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d883a081b0762bfafbc09ed7f296c2f92059c0fd4718ab962572e176dc424849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e915035fc1673f117f87feaea9be8e042548cedb1d0225d7c2a9aa9bb83a38cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namae-nadua-maav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0538c2c22498b87febfc581ad13688ca7cf8c40a4168b2942448fedb3bc42c83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c31e581f44251d423b8139663e69b70cc8d5c09fd148194b0c8d2f7eb3983077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c26702fb24f0a2b66317111037d1b367d369fbb803b8382eafa74be14472566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutus-manis-naudatr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85bc65df1bdd30f0cf112066eb0e4cdcb3c5b298f26c6882fb4f04b5abdc1f3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/gud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c4cefbe1dba166156c538b31b477276bb5faa15a5d510db5d60ca679a7260fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasution-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 068527a4147f1fd3b8e8914b54fab7627096961351e577d370fd1a37f8395ee8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-ls-dinabus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad3c6b9d48e896e592a1bc1173540ce2b25207838ccb21431344ab4af4f694dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe737f785adf5f149965e8dcb042d524d4391117ae6c32f273ae13cb074a0d9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f19c15bfe05277da4eddb13944566d3d98959ed0912121a735d78d9ff3dfd505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manttu-muniape-nuiol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 867ef719061ffa5987094c2e7a1b52e4c60a8a98bf81f4ce68e11792d6ea39b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...