MAL-2025-159499 Malicious code in manaf-asi-mant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1108dc72a18f836527c46d752321a6dbd7e16667bdca22ceb54f19fd451c0643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162150 Malicious code in nokire-abimanyu37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b58d3fedf069c2eb10349b427825f47754f7ce671d5edb44db16b65b51fe45a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b97ef8ec6f9b31e1f787cbe8cb9f8c53d8e594c5a37767fd0f33b50b69347843 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-ofgaf-gafjaaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7de19fced31d8aeff4175171fcfadf8e9738d52f22af0cd68b018a5d00592ad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df8d9b8e75bafc458c31bf88ad967352fa6370c82cc3023ff9bfce40a157059b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upilkianula-lukuzili-ilakzou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5df40fe4e959e303ba8e0098fd97dd885d99fd686d76e2e11671a498374c3c4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07da10e6ef21002f0d1c92e99b933f6f692d7efbeb5d6c670cdca9e9bead93a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muha-nyaiauanfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4a554d2b211ee04efeb84d46ddb9443bf6107eb2a8dcc37652578e623c24d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-asdsf-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7404a08f60376ffb276060ed6ba1a343cb7367cdb3e609a1c3ceeb07319a398 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-otatu-umootari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1129a5545363ed7e853495a61f03f95b5adb77803ac625a2ad4076dc74093d2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manus-tavauil-maoiti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ce171c62bc48179a678d3206dce8ae7d900be67d145522b91443761a9827c61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufi-gobali-jaruan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ae885bd3fedc77082d8d1569dc426a063feb8accfb411081eeb94b1bb5677da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 844bd8fa99fb9c28f3d618807cc8ec34b6f318743fcde75745f49c2cabdeeb07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inagi-vumafe-nagafufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a2651b1ac40a16a2cbc13de6a97a95405d8ebdc3bc5b574e0943312de15329c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akanabi-aliga-aihmava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bbd9a2ac0a084d855f1220bc45425fe46328fb73e30a3e6db1cb6c5dea4bec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/yyta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0a859d2c0bf102f44c95d4511f565e0cc2d0f98a3abd0b230866ce4549055d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in man-nonatai-gag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f8c90ce0aec5046e76a53af23f6655aa528198a375b498c61dd10f82612b346 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62bef6ce8e12c3334da926c175a0c37d20f883f3b58b06e2931acf5c4957e9cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c5db0be2aad9425ac3e5f3803e9b2a0fd155f08a8670b0fb0e56afe555b490b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b37462298386e757e6487b0ead267ad0c7f038229c0213e2ffe94a2d297cb70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...