MAL-2025-154056 Malicious code in cinta-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4fa2d7c1c0f9d4f6c49abd834316eca9ac82ecc0bf97841524b2febc9798c3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e193a3e43b7951246b47c9c86c0bbaa161acfd37a26d1e39d45860cafef7023e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 559f65fe9c010d59370d3afe56c331ebddd62ed1046d74a3e7ea86fc519c2dd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70d4cc0dc42f9c5778e7985e99364bb8873f74efc292b489d09a3d2f55c9aa51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in azhar-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0f7912ba7ac1f0fb2a15115ea20ca2a6339b25e998bc0a4de09c7e62a98d9ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/sssaghafda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08b391d94e9e3b09542ffb697cfbe594ba09f7556e9874652e80b94b96aa3792 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2df89c4619131ebd96bac85e1d807b1e64314f6407dd112a7d8d1c66396ce2f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upa-lukzli-ilazou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42a80797b5c665ba2764ad2b3152245820dc7e28e737d7386cf2e2fd9ae9c50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami115 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53e84b84aef48677d1c2705d98ac8d215de090ed1496b694a3fb11b0a70c6501 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-siaiama-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8af0374087bdfaa840557d222dd993ccdaf9d08bca2973c5ad43fd9d98bb1795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c6206875dc94a106cbef91b6d43f229664d1d290be4a9fd1f637d4ee994905c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scaiasor-dara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d76dfcde1d11a0e478238fc057c1de3f92c6639c597db2ab437a8e29928e86fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fdb50296755301b290096f055f268665f30d5a89292b11302d41cc265b6b41b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-aiga-ifu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdd974d9e49ea498b87cfc41f393982097160e9a8a3a38c4df42241a8f2733e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nokire24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b87bf3e0def4ac8385f51d8fcd5d160276d02c1594ab95807cd4abf1befe2ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muyaig-bfug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97a8abcacf7f02f443d3625c2eee85ec41af228d9484b09dfa1155854a3dc626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 240a49610b358214de35a97abe83df42d7d264c6d0336c52636d89deedacf33e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arjuna36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b5147820e709047aaaab12812bae948197bf55865d70c292fe55e9e78867f59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-diak-nulikanukinatain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902d9720f458d70ac21afb0845fa6f11ab24ef0562127f8c05907f93b14fd0e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagmas-adgmifaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca5be06952ebce81287161ad0d2f8744f49a103b35ac956781bb9d17fc995a72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...