MAL-2025-149961 Malicious code in @mipta1/asnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cade45dffee91f9b151fdbafe70d67ffc094d90882dcd7a204006875409e4fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78b2a50080d4c7d1a201b20b08140d7d972cdae334b53232d25446033786331b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ertacssau-vs-munchen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66fa872796c351cfa6f3ac0f8e1f3ac4f08141ad4e6d32f4e0f943a30d2fc2d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-safifda-nasidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b97bfb93945e28a6a1953bd098cf9328dcbec6b81d391c430ad10c3e5ebf604 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7dcda1ee45882e6932067816f6819e670fa1c438fb8bd42f167da17eff704ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daff58b3b51a1536c6204ba25769db67e8678e721795eb68fceda36ce4f5b8e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba67736a6cad224cd8ddebfa68b18b0fed63eb1f8bdece93b6b163fe08b63ce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilang-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8a8342b52fe548b0ca1386ba84897957d56b9f5b12fda90e97ff0fc592f243c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfba69bae657a49329c55cd2adbc568c411bf703f7ee5b32346a55c8eccfa5bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0777f156eb79b8ffa1eaccd4dbdfd83077430c81a130e7a0c5acf6e5a148065b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-dok-ujauik1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac5d150ecaabd2149f6b3e1e6a38088db22f1fd840b824e9f28cb97a4b504c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiba-avbai-abunahia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b007546fe82f32c3ed3b08594c587b9ecf8f4440796daa00838ef2efa91f1e7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokiraifiagne-asai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a75e3bb26905e6344c820d51fa28b0083f3326ff8af82b74950bb0b862303c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b98e1a30b683cbf4e5bc371a4f4d0b86654c1e86afdb0b53a0d9962671c4d95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dc7e957d4d8cbc927aec61402af248ab9c2f83a0d5525aaa5ab8e15129f9239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-nofty-mutafafgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e0e4603a17e59ba2c00409592f8c9bfcae7a980be984655db4d0087f1de0ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-coki16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a4491592d7bdd78a32add2f31cebd138c3ee4914fcac4b5b93c1fc19b95a49d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 221c40d13c905a5c7492690a25e3f86f827ae5e00e91cb9323c51902d7c5b5e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anaisis-pafi-asia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f145101f1937371294eb81a4b6c5c6079c7bd0dc96733bb0e72995de0a554c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50b74898716ce9c7be2bf8b6b47d0f6fc9c191cd2e1dfe7efaab7a62bd32b59f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...