MAL-2025-157663 Malicious code in keyla-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bda63db49efe3a6763560ca6894dedcf027825072ea08388c3380b6f88b7a90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157644 Malicious code in keyla-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1247c5e1c87aab9b2d6fcf511ea95909686752e606b04983c2d0c1f46c468c28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99afaa494e07d7c868417437d54c1d0db61f2bbf941caf6227af55f8cdf61f8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4163aed1d076846452617420160a0232586dba57c0bcf855fca81c1b9a24bb1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiuba-avimungi-auugatoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa145a87bb5732be3cfa08662a50417527e1ba2e507b08a3b8bf58855250ff9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aiu-idasuyffan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 603b6592800bcf7e2815e932fdbf2f30227e8603058cf98c2eb2f22589005974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffe6ff5ad14b593aeb7df2917cabc8e1d47acaf240b3f087a100c739aa77d89c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1738d9608eeaa3c38809d1df244059d867be9484a75df5eb0ab96317e5e6043 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uarg-mthai-sufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector facb40567e7bd2589c38e1629d7df1fa39660a38002fb58d8f7cb5e21f8ac52d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arhani38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 652916d59af648b1276c4cc919546c75086f97a1f423095457a2861de3fa3547 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d37ac08e129c9b44df8a3de1b2cd340dada43158334be6c56f67f3c3b6c8d94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f2dff06895b4b9f2fff582d1e21f967dfbb085362e046bb9809d3ec1b68e99d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatidra-faradda-butya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58260ebe9f89109283f95a52276f189cfc13c0abd250b81521053f9b828db1d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-mibiian-aurusta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04feb3acda531da9a55092242e68d0166df02c4faae77568011ae68852d40ff3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ramadan-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89415c85fd45b2589ac5201b1b509eab1739f268f1a4e7861b3cf68db420641f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-aoaf-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2375b1bb3d9faedd7c71b43ad14884503a29cdd83037c4290f2cf5d262e33ef6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lukoki-nisnumabutabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8bbf43101aac0b6792bbfc969cad7321822112b013f816ab832e0e1be9938fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32fb57086ab3dbbc2fc5ef316a9b150e85845cd02f18d079d2cba975bfd377c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muyaig-bufugabit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e80981bd4f0a2a42cdecf143974a6e930b09db352401cefacc96e1db81f8246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inagi-govama-anbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84368b5371825aac8b3300929191da7ecdb4472b2fbf3c20a7a4d7181e118ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...