MAL-2025-164860 Malicious code in rinto-poke83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea19144bbf1899bfed23869b1e8b8b4c7e742c29e7cb0222f3cc8104464d70aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2c6d839c41e0226ed599e1c355e069ddb709883a3586d70b64c29fcf603d64e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muha-nyaianfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d434bb2a69130697c403ded2f1ba41ac1e9117a7233161e7f5e99a91c17594c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mantu-rol-gagak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e27ef74107d5c262cbd80b429b738706b3627b5478afb288d971f0f9e2cf630 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/dicasx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4584067f199e95c4b5dd86d76a376c6c911259a114315fdda605de6c92afd6b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inagi-vuma-nuagifvua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9b6e26dcffedbbc3fcf930be88b3e6a1e740e71fd4d80c79f4ce1c92d18036e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tobrut-hen-nubliesp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51b0f2b18ed885bd56eb53496c01ded3cfaeb84fcbf51c1141905641ef554872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7d3bf05eb4fdaa32134dcd74d99d37a0c98ed39f0b531c4b9ae1899b7c66fc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/idkk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c81b159af4b331d9163ba0da21df411bf2c63f73282bace1c47429121bcb997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nojsgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9225365a6be6e830df77b7099fee11347a8060536033ef3a3018805a67231196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lisa-atukbamunima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed07c14e4a2cb871dbbf19e61f5b27da884753255ea51561e809f506332444b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86e3b796bb838fe32c8fbe761de231e52a1582ae45efbba37394552dbd387d35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46036a44fc9ea14541a7e6ee28161307646cc6e3db41e92d2705ae20a4bf6d7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ewa-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b49b47e34532a589917a3ef598dca023dbd090d131380ccbfb5e16d3f2d123c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nusta-budda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fcc75dcccdcb7bdfd633bedd57623a11c19bb40ead0d51d2bcecbc050d2f58b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lotsi-banavali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52bf78c793688fb3c0ef5de4709413263a1aaa0c3f841ea410e33b1cc285649b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/dffg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b8e0e66de984f3d7be61267b681cc1b54056ef14bcb6e6a36b49e025c4ef541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a4bc3491c8f5ea1f5b4d70d11c7c5f08532fcd0d83d8053d3e5c209964bed3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d38b5d0dead782ccf44819b33dcbf2ca90b70f2a29fdbb153aecc8047a8b489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ronaldowati-cir4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc684f820c21227bafd1e47a8555be11e73c8efec7c8532467c97d7dcd186737 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...