MAL-2025-160386 Malicious code in messi-urat-ds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5532eefaa324d5d7ceb84f402c8dde8a6f251f6a584cf730360ec44089aba2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151036 Malicious code in @miptaa02/wqh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33874a1ac8a6cf1b4e4d62bcbc3d47d23db3526eb4986f4bd1e6e752fc52832c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in piluka-llni-pibalima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7d80c1eb81bd6274b205f32cfd2f0d8e8facc747f7af4547aad984cdd736dea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abel-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 742c1d26b7d5b54902b1219fcd05fb25dcfb340e86ec35f367f5da60b8361b95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhadafsfufi-nya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c67cfff6f179f0d1d183f41e87f27e1b79601dcd57b0b5fc13a1bc1fb033260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d382f4d4bd9e914fd450750001fcf1303b7e0175e4f62241d0af84ced2fb4784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusya-fd-rseaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51c195b4432b523d31f06aa63018941a006be12a1b233207300604fe7be29164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/tqd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc02cee55f7997e2e271fa79db929ca97fba3c98e38852f2ad6567583f49d09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0479cd7ed9763457fb033fe296d147b648b6a44e53c2362e5b7569e32f3f67e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd561ad6ab5e8a1e5d4be51a5ea4718984cf12e62ee98f85fdd82ff0e4a8089b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-nautyt-nubliesp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b194dc00761acf60f181f73eb8859a8adbe22355a161b4195d952ec4578cbf8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f87f073af266c91778b1e536c4455149017e438037b80d51e18bd93871c5fc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c902c46bf0c30784c829895af6845390fd646c7235a7bdbdd709ff24cb5d7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50f0937c9ccb375e561943e5a2725b2d22106e6405585ec75c61996966000787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioago-kamkoi-alasioulima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54d986f6fd592413989ddb36b05ab3a670e1ce27a839a5d25e36e4b1b5726cc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upa-lukli-ilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d883a081b0762bfafbc09ed7f296c2f92059c0fd4718ab962572e176dc424849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/misra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 214a37ad3ed6000d671e26aef2cf69e01d7dc3f90fe27edc5e7ed1d3e4655524 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-namiresan13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 197b25c2451868fd4629059bc893156d3f9a7d72d92628beffc208ab49106341 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 579fa0838bd65b72244aeacdf901182e94493d97137094cd705804d331aed164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-ntai-yai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3998de5ef483b486d15d9f0b7657bedf569e0c67200b56ac025608b8e0574d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...