MAL-2025-159725 Malicious code in mans-nursse-masanfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbe3b1731298fb408541d4cbb64c0d7a1094e3d10e25df1cd65dda00b0912128 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156443 Malicious code in inal-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e39c49b9a22d233b38ed77edb552c7ae8bbc46bac1d6e0ca7d1eed98bd082258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lukoki-nisnumabutabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8bbf43101aac0b6792bbfc969cad7321822112b013f816ab832e0e1be9938fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carvahal-nutr-sdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 538e991000b95b12f8f89f169929dd366e77a3d2e703cefb67ec5c616f92ba5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manuffak-angabofi-gun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e42ba9c48437e930a57e9589bacc6364745cc95ca7044ecd5e97846fedb2467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fba029c8f94395a29474ad04f3ef7f1a54b05c57a5792f2181bd875104b59de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfd1ec00caa36d31d95ee3a5eab850697ce9eaf3fbe0bfd1b1b92597a4896d00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abang-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 385349fe09696a89c21db68cf49ca78bbe9a97ecc18ecb7334820428a512cf82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiua-moban-atayamuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ab71e1de237131d0b70e9ebc42f23498162bec49997db17bee8d96fdf2e7d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c2bad4a162cc01c58cc40463968fda876a557b1d008e63303732033c5a7746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jelek-r-anime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ee14f533151602d16e016866b4d443fdb28b89c357a26f9f9402b6810235a60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f832ee5cf5d97b0457284ea92d687e93b68c6e950c32ee08c218c2539066fc88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902319a3bf7446f2af4317d717d199a320ef5d186dd40858be812a18924d28b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-butya-tyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae5707a97ebf3a7984b3e65773a49668550bcf09820ef545e1a019ed296dc4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymera-manuyat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47bdcb879334279cf7517dd244b74508463400d38bd025dec277e55e4719f0fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1738d9608eeaa3c38809d1df244059d867be9484a75df5eb0ab96317e5e6043 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lkui-kunamlakmuib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1366a40f64cd28d85f8d908ea87b85b25e04b8329fcaf798b9d485ce15ad9c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4da79801b5e2c0522b67647b4d785434930aec8ae0cd3453818ec93f2ad0de11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a30509c490e8f2112b57eca8930e160c2af0ed7ed1a7defbfd88f77785ed2e8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losit-bisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d2dd5c615da01e59def8e98202b22fbf354a45b30163d952be8dae2a2f3c7e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...