MAL-2025-168332 Malicious code in tealove-lady26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88a9847e09b26c89c03ba850f9687215a6f6991835c24869ad6ea96437ccf6c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in azhar-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0f7912ba7ac1f0fb2a15115ea20ca2a6339b25e998bc0a4de09c7e62a98d9ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahmuda-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5766d2436b22b9d7cb1a559db3c172d4e4332ba90242a1e76125caf23ba73b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabuvaua-nalui-lunbisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487f826df0c57c77e75e19cb49cad1b189a2611ce8916f578e8bb40e32064ce9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-sfaa-sffs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1662398b78c95d2b27b28055b2889cae102571054bb4b71af7d3315dee3f8213 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 177b08717852b72f08f9b90695f6bcf494a899482d166f83454c1aef0422c047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-tuad-usidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c32b634da703612ffb5c736af2768fa920f7f2aa88f81e4834cab6bfddccc59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansioda-nonatai-amutgiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 518723a17edd37f4c39a468744f3fc2d3f088d814ee94622aa63619343d73b05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39497b012a854d9146fd35ce8765f0cf3cbe02faa1243f9bf830f8f4532f1263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db351ab272ac72324899fca32a4735267373713751f8cc8927f3fb27d7ac7a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-fia-jisu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5df36903f625d0f61b4b137d722005135e5e49e8c6b9f55248ebeae50025081 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upilka-luzi-ilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3105e7dea03d2e4eb4b1a03dcbeadd383afabd63418a58b68f2e946cb35e5da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-reborn31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee8710d3bfe479a372a277d562b1fde9812960ffd52a6e4bee6e89ad5bd560ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2132dba51aa3d0839a3eed62d2c2e93bcd2c57fab847e0cf917624415ca53e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/tyuaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf606ea7b95ddbc85b59e471a0aa616c09338486f971ba7bce122d5f6659ea0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibona-mobiule-aruio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6e632fec6a2d168ef5510c92694ffe31acc1d07d194f56732974be84304e018 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-goa-jamiana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9cc578b359cbc3d657f8934e29a1026a9207b5e5b6763fa88faad682d0c4cc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angin-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5bf30e59bea43ff8bcc886df164b2470b0c087be318d19744361a08d1324e11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansioda-nomduai-mungu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbd53e95a297642073048aed37f83cb6991d523948efd17bde31335ddeebfc96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in analus-pafai-asuia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 524367e17649b5e31d4d7576bcd2e5c6c9e415d3deb54cdcdf5c8c41e898cab0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...