MAL-2025-150275 Malicious code in @mipta1/tsesax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 050152a8da930a887b81921648aa3796cb75a58e492e47be6ce4b7adc760849e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/arfag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a599b56d3fde72ae39bdd8b7691c118eafbf23c123b1763d8cc3e759c272dc47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munya-mipta-asd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31866d009f41f1bd165c356409be795693654f917be4830e3fe683c48b33e1d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makani-aiba-ufvga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bec54668c36a29d8e82cf0833665f40316bc2e9971ca35643a68c1d218504743 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasution-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31c1ed63b4f87000bee0d406d6b6525ebfeb5a3098964b20157c3061fdfbbcbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapafovgipfao-safa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90cae31d8b18b19e195baf3fe3bd2b06e5e759f065feb200f9e6c1ee4ad575ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-magu-naikam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cadacefc174bc23fb44380f2596c0413ddbf6f264712bfb5c72acb204663f71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f19232d527deae2801a50b8c50bd029a8878d67fe2cfbe004c791c2cb513c0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-butsya-sadd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cff8731acad3c87d61ed5a02fc9a9ebc78bce3724fa5636da50cee964d76cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angin-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29a235f59f127d0550d359eb5b0703ba220da51ec820bfeb5bdd0eedf62aca3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nuyasffsgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3e3ed9f6095b54e9bf0a74e8408c43b368a934b4cef45dbf43a8b2fc66d2afd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abeh-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fa55bae5f9b8810363c5324c43a0a5288f587e076331e1dfb0733088194360e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mafns-matfddu-masan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fede969448ce0702f59e34889532f16d5dc5701a40a1f485d351b2f5c88409e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff8bb453b88aebae1ae061d40dcfd74482fa96a37682dda78905b4273c64c4fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lala-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 520e2561fe517184a8867a6f8b20132e0af761d1ffa09748f63401fc064c0ab1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abang-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de499a45f9b4284caed50672f9030b53a425ab55505d5c6b415fa0e05d11e3cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nutsai-kaffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec2d7eb72b507e5b7f9627d699fe6cb86c07ee3ecf932a5a8abeb9fec6f445be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ef4f79a73e8e161cf9fa7b856ad0108990a8c31d3bd5e138c4b39cefaab1b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-okta46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc769f0ffab1897d2551e6815602113f0f24d73d302a45658b0cf5473c6560c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-aiusai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5c79d5acfd72dec55702e5dd49d9b6a9e7e3ec31b02043e63433200a909e84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...