MAL-2025-181171 Malicious code in @akunsansan0/baso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13470795bb2c9870f0861e49488796627b2fb29eafe714142fc272db77d6b2fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 414f9c3097af79ff4a621b1e013ee2e1343ea7c5a8cce8d8d270f72c6703e78f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-motup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b62f882de56ae688cfe23da5b04737a810425613edeaf6d5da8959b8ffc5ae3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-uwifit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aa189c3ea80060af513e39051285cb8902a002584e3ae92818d4d4fae28c28a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-uteli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9457c303bc63dfecee5b43328ae83af9f30693b7c2a388cfc30cd37aef4dcbab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in analusia-akai-iniu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89942d05c9b5a6485d59e81c299c4503aff5e45edd1409ed39cd818a92c1df99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nanakila88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4f6874019f7c07a2e99fdd699eb1c95df9461f7dd03ca5744ba2428949ab7bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-fig-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c4603eaf65bc4601d9a6a616f8f3ff0d5114871ba39fb115c4aaeece73d980c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-mudu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ee4f5952c29c48dcbed4495eb50b203ab8f80f6bbc136732f47f73c55d12d76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anais-papmoa-0pipabmaoaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33f2a0aa056ec37f7b7bf6cae200edcd779dcb38cfe8ad0adb4ae7c9fff7d39c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anais-papmoa-yamaioang (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23ec3a2fc4474443b48b2603f20477703855e7fd32bd1d8231e32512f683c14e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-izviw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9776e11f33117e433088223d9a7acce1f87f8e7f5e8077b7e5e990490069e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-avejem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70c94ee284cb9ad4449c3fb07003a1443308621e9ff4dd1ca4e1e53f4aba983f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-ramjak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2095c16421ce579f4e386ecba1e0e8702d97973855e25cb8028b42b1d83c264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-cahdu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d521ee3ca77a15662958a3c89b8f41c6fea841cae27085a758b495294ec48b5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nanakila72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1532ed6107d3a0f42896a0f959f3072d14a774b91db782119476b16e9ef1aec9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-hule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2d04eb8ab94bb5bbf59091db66d912a83ffff2b31e18e8f6420c3128f94a2ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-mibki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bf102e3d7c0cb2523c066d6ee8a3509ce547b487c06cccc5d80be261be63403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in analua-aki-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 049b6a88fbae021f70a69502411ef13bac193bb5866743f8907fa89148cae5c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-zevur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c1c9ad8079bfa69b4d6866fb76b12663acf9bd2bd9a6086e6a9374fe8428afd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...