MAL-2025-171884 Malicious code in solarcrafter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d17bb2368a511a20dd881b787a0cb1c1428d194e893798a4741fcd81fbd4d07e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagimas-ofisuogafag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c79f58a5de1943c02ab3b84f06a436b10859ac8f592c8f5130772f10225b4541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-murasaf-mant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9968411e5face8b7f5648fcc45bbbd0a34395558d7c9bac39f0d6b3e6839589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lisa-atunma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3d3f6543f147b3cf90024ced16d5829c434edc7c90ea7fdee88f5f035854298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec088bf5091e555d542897205341b35fc398ae9a949a12708ad473a47fa5735d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-adaea-dssd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee0935dd6500c83cccddada9a0c1ce959c4a302e23c838e71b580d20964952f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in samehadaku-qszess-ur7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81244c1d64b598dcea35ece22eff67b599e3263f07751b34d2a34eeefd1dc7aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/nda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e169020143720ac074c55a1a88ce9415322048fb839f52d2878d6e9d6f95107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inagi-vumayfe-nabfufsia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22d5537415336ca4c63ca2db222475ab997afae89a5e8c3eb25d36ec29f5db3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iomodra-fuoa-jafuliafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fef930aea972f4e6082d151f878af67e7699d58958de4e0cce2ae6609a51935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uarug-mitaiuhai-sufeua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e69dac3a136f3e001c7a988df6e645ae038853d8af12f61c64179130b88a2fa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-amibon-aguphoupabmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b5d1fd23517b55bf3ea47d87ef19f69e33e8195825934d191165efee77d1c81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-lady2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55ab4622cef31eed247890e8ccd23852d87b9fff41764c76e0970cc7f20d2bfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pil-aku-kin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3806095e217cde95ed4d5a9aa856af85f62bedda2d4730be67a942437a5e4fab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-fuhopia-jasu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83126b2784d2d033b5b6b45d3f69e869ac97cc7f83bb4aef70a423d8ad786ad2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/lansia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dce3bcb73e7ccca80e2ab771b281883948fde38e738b9459173cacc02c53979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-aff-gafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db796bd0d237680bd543e1f82bd6c436926334528346047e3f809200b7548989 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddef82ced3947f67f8a474ba413d7e4f576c311cd41009e7cfe8a7b9550cd1ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f17d77c81e1fa3ab20b1e1c4aafb822e0c097b5634a3aeea0ecc4c632278a9df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/izdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d23131db1d9c5a742ef27f1927e87eb45837764d0cc8078d7c7e08cb08a47065 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...