MAL-2025-159168 Malicious code in makaimaigan-aniga-uag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7186d1dcf40ae9b3cc335a2258ce71dbdc428e78ab34239847fedd78da49da56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cea4b40d82048e522b35c108635a7cff58f3cf1ec1f13295ea65aabb27ac87c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angin-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc292fb78f0c66c62a8c124d99f4d5a56ed0a528ecf99b40e11ed11f0451cca6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaa-reborn42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2257e85b6714691c2f2734baf0ab9ed00ccceb1710d1c249ee8cae99a240b9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angin-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aafbe9aa13d3f1ca3e77be4440142dbc4f2c269cdb3eadc767c1f0d6fd61777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in samehadaku-messsi-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92cc42786d5433ab5a63fa627c9337f0057645f3d59bf6702d38326987d856ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fasseg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eb0c44daa2f255c3f103163835137b321a374b87e47224e1d1d1f5e781124fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-diook-ujaik1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ca66cefcf73e91886c39deed8ac3bfc8d740e34e29082a2617b292a4ffa6852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabi-aliga-aihaamava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 552df4886b0af413d8dc813f95893a5f59adcd844d3bf7d4f920c629f8248dc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zenitsu15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d0c2ad103ca47dff2f620eaff024c83aa2f5c75617758afe59a07de4fb70ab2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-nuyadtasfag-amantan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de29b74d4e3c15d43d5e385cb527ac3acf1a2a5ab080450e4bc94ca351d5c8b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ersius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d350cd1c2ee9a681699b10cc081b237f70b2d131f1370281fd586cde108ff557 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muny-boph-sadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80843aac9e7c027e65d15b2b8ca7e2a63efc32a6d063601c10fdf57bd7740a07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-ukasiamun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57254a196b752e0346a9a7c461156641289aed3989d4166fddb5e58b9679af7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munya-mipta-munaro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 865cfff88bb13c34d837aa909c5d3511e0e2b8292e7d4294903aae6007d4468a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8ee309278bece88585e33a1185b367f1a51e9aea31c46d1d65343cb7f3e4dde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d343ad49e1a4194ce607177bdecd203dcfa9bfdbfafad64a0ce8b6fdd908157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ibanun-ota-umabu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 950ca1f65170983e7c65abceb14948b4699326cc09f6381ffa935d84d919c226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nutsai-affa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 842e7c86777d759c511fcdfc4c911c045710d4aae5639dcd0bd0b1cb4d3add49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lot-bisayuam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11da4680596b327b1aac724f0ce099391a7950b459fb2fb4d5f9d57472a55684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...