MAL-2025-163170 Malicious code in nokire-nana19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5fb67f371cc74c5f1c69cc495ccf7020e1ac6589a77f94144c66752ba3ae8ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ef4f79a73e8e161cf9fa7b856ad0108990a8c31d3bd5e138c4b39cefaab1b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e21ff3c876273f7f9d75db3e0746d2dc356b1aa4497112b37b82005bbd841923 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa8e3b73ab7207ba4bdcb56a75f673c78c1e7173ee6ea9c46393a29e44463dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otigan-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 811ae27958e39b3590b7df1dede97efb9b7dba60603e4dd4144ff7bdaf5a84c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10e2e6f969ad1b968f6de30d4235077e2ecd23c20904ea1dc6124979550dda49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f1ab3fb5298ea520cc94c2b245dc80925d645513a0278a64954f7cf7d4c5f75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-safifda-naisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 012cc6e252390deec94c167ce6ee68829ad7a8c9d52b556771b98c5239e760ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/pj-21r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca64e14f0fe2f163a0f20d66fe79655489febcdcb06eb10a91f45e1d94bb0e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ssghafda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a95391f099b0f6d20a2b6c2d124df05f7a9c7a80e610e16df10a620698b4b8c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-uyilu-vilnakun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c28eca07d79637b46d57263bbaa16b67af25d0e2c1320807aaa0d7ffd1abd728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupai-lukonta-igavugafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eea8e6720c146cd8b2f62e1bb9b276ca1f79bc1026ff43188d7c0b6182248c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ucok-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f208800206a499ce792f8702c044854e535da19fb0ca0a140f50b48533890e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fvddd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a43d92207d39d067abad079ea37c6e1a72be80ef2b68968a26e0ca9c2e80fd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/raldsasadzy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cdcb954ceabf4173dc9b13219d236a7981667748ea77a5eb0e1640561dd7e96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siregar-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b3f543200123d69ec4385c195dd7a0bffc8aabbc0a98e3f1f62e07201e4202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da405952c9d03bde83853cae73388fc0b4a1cf35b50edba5d2616c2fa6344d27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-moloipe-asinu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8667eda317f467afae5a1e5282228c6027396d3ffe32c3089896452b68136412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokirane-asia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76bfbcbf6ff0c7e5c7e5922407e8891fe4812ee2030e6cb0d762405f85897da4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gurs-mip (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32a8e0a18e7ef3ac2e08eba8134db543b6db6d8fa80e76c196bccfe208fe3bc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...