MAL-2025-164858 Malicious code in rinto-poke81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9bf6d6602dc2c737b3f060fecedc735b97d1b10563747bdcd87d69e02b619ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/sdsffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86c3762fca0ca7d9c5ccbd4837efe88b6b6cbbb75f1555b0ab4e76428a320927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c59869b35a5ffed1ab07076045437fbb45d44140775338833197e4e3670eb72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-nofty-gogiaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 580045b129521af6733e8bb42669a77160f7ff75cb54145bd1b2a480bb3dfd55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abibua-moban-atayamuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a42ec3991fa113f7f728c62b868b653e781493ab946c202b41f6dbaee755cf93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musasiak-butsd-fa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7974fec2bc4750cbc562213688f79e7e82b9ed546b1eb81b6ed930c6cc9b4bec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arjuna53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe642527811c0c97b4a041bf43b00ea7be07274db2761003a020bcab65e960a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3ed6b788bbd7a36d49f933c93633536bc1a428f642d49f217b2296c8a898c05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otmbian-nuytad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 028fd8087bd5cb53d0565a295f8b8103ce95290bd40477f9400dd768de5f689b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dfc602aadc0b148d57ffccf505f803c37c5fe9f2bc738877b908951a36b1b46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namada-nur-nagama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b0057d0a67f3c6b92fb4109bad7aa684cfadf6f9ccadded2f9fb46302ae9f01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ucok-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 270defcba4994b2216271f8367946838efe8d764c0c560db8c83067058134bc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lala-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 666b9c68a57017e77a7bbd80cb54c1170283a7468ce4b6c98406cdd924f2c13b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upilka-luzimub-ilunoui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8510a779e57ce3e9f6a23b68d69077773f427c410b50c21527703ac2a7320fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upilka-lukzi-iluzu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101f7b60f1a2a06bccb535e5fc76d2406888c45eb004a8fbfa39c1103066a45d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-taic-alusakilamu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bd535e79de27cc9e20bdd8b38cccf88b5514ed7ed34ef6717df1895af7237b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a63275f8cf6b568f78bdd9b43df7f1557add0b45d97fb967f5b370d01fc81b2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3556d3480edad0653a8aba7acaa799ce63717fa918b62fee8697140b36eff49a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-aiuga-fiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2dd7ee6808091da803510602cfc842dbfe7535101afd4f5a0646fc5ad23b649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7982c350ef140ce70321ae834efce710ffb29a2888062f653aa8aa18048525c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...