MAL-2025-162234 Malicious code in nokire-akaza22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a07abbe574ff4fccc10c0b076bba94df4abb1299a034aaa91f4d1c66687383df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ramadan-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d4c2abee7aab8717084eab7c8fe397a9724ce61a18db15228d79ece410bfac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 352a6c6193c78eb9cae34ac784fd7cda67fb25c668b46f16ff0a7e9b107c4af5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masiolan-ofamaini-doikubato (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fa02c08d3a682e45f7471d0e5450fb22ae523967fd15b55a2553730c4786f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04fe8ab992b184f06c98e1065bb0ebf38cc18525d9a8b38c34bddad2b14e3f01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b636df2a11be8b762fe1e0dad2aa33ab341aa3995e8c6b6d1cb4bb5cc2e637b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losiat-dilaubaukabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05146a01c25df318b8628860df7f1331a40ed389bf585d9ac89c45d45e17cad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-namiresan8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ad5cdb516e273b95f7420ef92340a5ef25624a8893406cf9368920dfa0d5e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-rahfeg-nahahgsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e76962255f5715aaa1f9df0e01606c66a3b786345e778a245e009f2f6b44f27c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilava-dakrae-naha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b93442960fd94eb4fb46c467eecc5452805b459fd6910878597311f8c6160c3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a7fa1acbdaafea4142d78831ac0de35b0a66fba13befde89d3f990bcfeb4907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ewa-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4050d797d608df4ee71a45281370a71d3b922739154279b8f083ad5bb17ad951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inagi-vma-nubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2223d5a6c7e05b77c58a9d2280767eed4e57e78a11484d56b10e7cc48a42239e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehnah-codifad-nutaru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53e4759b68082ed297fb24926a83eec3d833b415441d56e9f9e422f265ec01b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dadd71abda1a4539f61164399e2a69b5ba885e654a45e58332bc509aab8fec80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namadata-munar-nagama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ccfd3d1ac48b7f55f639d52b7199c85819e51a829233e8ae81b0902c7b81a87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ddddb11d93efd3c205405c2dc0b621ea497028b98d8d56cd781e4698ee7dd77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-afati-urufuaayo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ff2fd0cc2bf1f2ba05593f94e5022020d522a7067ba724f65cb1f702d738a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cce76e0eb9f001d7c761c28dd667f144de3cdfd207a0edf0920542cbd6296f8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/eetd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 241df69a54f7011d0030967aa96a6a314c00a1da73990ecc7e1a654045db70b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...