MAL-2025-172021 Malicious code in yasminputri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71983cec34b33e62a62517e448089312862b3ffd6b17996f7d54c45bcad89bc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nojsgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9225365a6be6e830df77b7099fee11347a8060536033ef3a3018805a67231196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/easgr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 457d0975d6ba650be8ca3010c6d189b2e55c46f5c120f8ea3fbaebf8727c6493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-si-fagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d9cfd7558b0f2e613467ffec57539b1fcedefb8b02d4028fb662020b7beb022 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muny-boph-reas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a97886c94f5abdbfee755707bef4fafae637745c8724d2dd41a1734ea9f99a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupa-lubizfzlio-igugfsdgdfdgsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a52a56d04a84db652f181a6386725e396693321003a657651fedf3ea89eb8f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 934e2ee39c1e23b437b629d821ea39ebea73109fd55069b2009ca236a5924aa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-dibiuk-itan1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed821ab8d2cc2045ba952f71838c00e1d303210d19f3d20e94e87eddcdb26903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-aruma9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da210d90efa282fe8160756200afd1912cd237e0a7fb0f045501ed5303605f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir113 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f09b603736e78862b82ab1abfea945831cef3d5b1ca053806cd8f52b70cd0ecf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nuyata-buyat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3c7151d13165c2c1f3a2e30b30e8b5c90b28c34c4742b0b296d3f863be27746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-aldofa-mafgfkol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2e329b61e0ba7bc7f5f0abd741559e817309839a7f486f6fde210bd67ac9bb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aea84b6125c44ae5d5724d3889af4630d3aa284d07a815d13596fe0a7c82d5bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 390da6b08f73f10e76e6b0b35f53c48a1e1b6704b8f08e9e3f8fe4da863354f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fugie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cad255f81daed1203169a1541814d435377392b7fb9dbb9d1822004b2142e7e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tea-osss-tean (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3a9fb9f79dc13935b529b7735a778f415cef0b719f878c09a1a65717d78c9ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jimmy-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9867f620c1501f913e9b575a405786a0f92c3a6963325b4e765072ad1e66beff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nice4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f452f56bd0e176d7ee0f25ec6e0049d278c2dde4dd38efcaf2d30f56670829d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3ff745a5cce33f4e3467eab35f48bed3165f8bcd6c6bb5e6c7f006a81e5507 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9ed56c8b2a5cc3aff48c79836fffa8bcb737a4af149214769f4c3280e8ad771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...