MAL-2025-171667 Malicious code in novalestari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12b12149d77aaa4bdd36d1a0c0cf5fe6714895da9bc3f0a54e9487fd43c35179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ewraussjfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d5c3db7301d2d272ff2072c02b7ec7b95eb3fc353639be6376bb04e47c9e40e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/sdfaar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88aacf54a0895ca7584dc409195a9b82ef49f88bb36e4d7cc6bb7d547a452f5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/sdfsd-d1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af9df4737dc3b590271c3a7cecc041c72e393dae5040404a562b9c3e1258209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-mibon-upabumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 164add95ddd023ece4d79dd4fb2f39df2319f3ed066e52ddb617f7cbbd439832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciaiaggu-idat-ffgofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ca2a51c79cd82197954b947855af03e74bf5df675515b5f3a90d9be7eab82fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aviah-afigaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cd559af2c5593ac55eef80a9fc7c1f0e966aac3fccd6d802e1821be0c675de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagmas-digfhagaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 041ff2df968525f0ce0888261d4c483be536c59700c086e0b02a27ac2c0769bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ewa-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 838ba09f0602d894251f18f35b2cdcb33aa5ae41869582210c5af23db848d88c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50b7a14edd78d09458bb6b16b3797709b223f408f7d96c4a90bbd18887766a7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ca8df828c3367feba5348df7aac443e2969859564c4ee6f007477167e2e660 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d703613bad2587583db3bdb037c2d65cb352b564a68623c3ffa1a451884e5af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad669b6085a79e1ff2f9920d09cd7a0177fc3ce85c7f218ae13814f8e50a4848 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iqbal-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f407604196c295490f916b7e65fb049fffc3bbea5b402baebdfe1b1444796fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53da1ee1efd3f07f4b55aeb23b12c9ce56de676d4bd86c2f77b0d0d4761d88fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9d27823eb64a9ade1269be9f4e0425dd7080ce2e421554c41ebf5878d2fe206 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7bfee52b97b3eb63e913e68b411394996e88caeab6275479a7e9444b1094a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c4ec2b31ba36680d7a5187c6f80907536e2665671c0c34ecf618cefa62c4d70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3731eedd2a408433b3bb566bdd7fd10d837df875cf25636769877aa58b16d564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scavior-d (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 009d2e521d39066eb508b466f6d05a1f6ad5574d66e0065ecb92554e4979b822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...