MAL-2025-169992 Malicious code in uinsu-lotaihmi-klu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b219643f1e884967860a71b76e84fb075c4172044242691b6ad0aa4be137196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163222 Malicious code in nokire-nana66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 894dcc628c0041007bc296ba31c1c613dfbb4e817c145173827bd899b4237528 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/tod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bd5a6837cb2137e339f1542f1de0166a81cfd4a4770f4dafdc20fa20e0d0752 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 067029fc6e8d844ca8c116a49d77e8204b1c5295b3931dd7954543fe602424ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotamava-aaana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d37c0809c04b68eea0460c82dc441f6960bb969476bf5c7bd780d492fb922d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bbdb512a01d715798249bb47ad74c5735aefeabac8f0e210c4d6e8ac170a136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahmuda-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5bbf119a74722040a410d7dcce14cb83a1d387868662002dfb08d71e945299a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/rea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f70a765eabedcfd0fd6bb789279e89d4d17e262f23d33524fb68ddec2ebd513f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuibanua-mobiman-aryta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e6380c272a5827c31478f112f5ca3cc9ebe8bca63453f87176867bdf0ee8535 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/kwghj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b679bff98e1b2918b0b075f4d3ffafe37c2f1d74f18c9feabf02281094370bcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manaf-yuki-maji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26c708de763557135532099731b22a90036a5be58ba1cd9e708f282b566bbc1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotma-jamanana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5aa2fb7fab5612636a3cfe321d5e089e6b5b3083b73844651c45937d328eee8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/pjusr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c91319c4ffe4e8f2158cdade5b0b9b8b82686117cff95fc1f4131286d2aa586a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a61e2767e8450ba5bd633855594dd0ed957c779d6d4b0fe980f5e6e8923e9a4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 746db44446b929b8d50b82eb2193f6dabdedb500aec891a0a3eef4f19c8236a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namada-kasito-minpodri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfd35a51bb4d2fe9e9b894873fe990683e2aebd0dfbdd29a4cf0b274d77cc4f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-dibuk-inup1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20fbc79222da108e240e9f0972b55143a869c2dd1646c28094b87628d879760c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zenitsu43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79de8bb3ddb725c6b1cd8722ee4b967a844e8f0d58ad4aa0ab9fb1a352ab9de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-tiaala-magolaaklani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a158af623b32207c831149ed420bbe6d5e1828365a8188eed3546e16eca7b0a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aiaku-unusiakapmau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8204c723d88cd1268cb055133151f2d71c12230c4e6a48307d83c9ea42ed2566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...