MAL-2025-160680 Malicious code in modirai-igno-jimagifag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 701e3db1a6e8c342dcf1fec668969a9d3820afd08b3aefc1d9ebda498dc00dee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manttu-nuyatassdfi-muadfiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ce0e954ddda61a75619e42f6362a5499842c7f8bb20460405b712bcf12f82c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-rahfeg-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1976e7438130ba031ae536a262e54a03c7d968aad10212a24c0fa78c9456a5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/gzfue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a1f43a6f2a982ff1fd95a9c61fb097697665e099f31650e8e844d4c2cf67890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f91ad5d28685bc71a7ba5eb43172ad0c65d5d14a640bb1e63be3acd2623f9d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neda-fofiri-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5478a07a5e3317b9c2e1e70402bc0d5a46d502e61f605be5b5d10ad0a2a7dadd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3035149021a2655f44aec750d1383df149e61c78af519d0cbaa7d0a948a52f40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 681912360dba3f6ad17e7e73cb21f5e29e82e664fc1acf27cc46d4f6d0f56b1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ggkk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16563c40c97ddca78ec6d564557982a83a85b58b7cc1b9cac65a0ee6ff342839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminasah-aiagaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f4a543f924c5da9e22519960eee28d9104c4d55efa9bb5fb4a17d5f0a82812b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44c74ced7e4d188082265639e69f4422d74c07ac8fb2d347eb93043199f5803f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatidra-faradda-nutiraa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e5a817739e3b05519743b1128c7a0f8c0aa050b8d0b4068d8a113361deb4d9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00f4ca521077e593466d3077d517128ab7a6f9bb0b6f131fa2f6cba2dcdc180e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehnah-muio-musrika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f17a72f72e8cad41960f38afbb8ddb2fdd2e7176991de6a5ec80f1a11e8ef736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ajushi57360924 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06706da758ed6496c72c52e1d96953a73d5b1fb2ed2d52fc67b33b73cf984f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-maraneffu-safari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 247d231bb9022452e0596e69c7181163ebabc0e70be735c116c37feea5d0856a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c77b218072691559c77e77022422aa011f2ec738b5d3400accc22df4d5627e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-mar-safuat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24c0a9f370a66fd322d8e4ed9c8e0c832b5692829fcc7350c3bc2c50a621d5f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d631b6b9e1ec4ed3dee8aac6a0e78b832b7df5bcb93af6a08219592113a7fa88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08d67560c00ce9358d8a7c6a1fb0de9c98f76bdf4ebfd7af24ace425047bb657 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...