MAL-2025-158807 Malicious code in lookingan-namala90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b199344ff1e1ed663513be5bd11bbfea087eaf378bd68cf7281b5d2a62a37c31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153930 Malicious code in bufpani-mau-nafafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe9e2bd2e1d52cf173d15f9299809f8ed6753a171af4ab75f9d4531c41200f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d336ced5eb2d0f4c13f812e0b251ea876701897a779417eac6fe7425c0174ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lki-kopmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bff0abe877acfec585a8bbf0ec7919c6372fec56cbbd5fb667067cd2ddfe262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60c0f7c4adc7a81497caede62ea6138e46cf2eff0f7a86c4a250c8fed3bc1243 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/gupusr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac2f12e176a31c9808dc051dfbb50e93f704d4bf0930207677cfa064951d1881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/p51r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c85876034d6a36860db50a097c9e669e4fca4a75bd2a3983e892c6149a9914a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 240a49610b358214de35a97abe83df42d7d264c6d0336c52636d89deedacf33e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abu-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf5d09bb786a71e977732670c8374a606032301faaab45ac743ec604dcc06f63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4157ae2c013b8bfef370ab958f92e3905e901ecdbbce875f7596962fa5b3b537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in man-nonatai-tgiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e12b406c5c8b9ff642186c54ea06a52258ce99b00633322ca154aa7ff2990ecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scaiasor-didadafra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7da9f258d72d09e01bd50794ae78fb6518d8e2b704cf883c6f9872b48e451af4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokirane-asaigfaka5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5766a91127be072a70c57b835c3a29eb97db8bd3ade37af1b6eeef3450780e71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b89eecf13ab5d092dbcc745833b75448abedbdbf2f367d37a5716d7b9cd4d13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotipmi-killneauar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be97d98fe2def760bae06ee172fbf36825ecb649d793ad6a244f2214fab604f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ai-aiusamai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 939af8b408467a699e067428cff8c4f02e42367dd77984af49c82632dcab9946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05db3e5db34bb31aa99c83e527456a13bfd956f251e1dc191d1cefc69a1f1cc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-futaf-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8073f2f0afec84e2812807efbc30c8692d232d9358fa732441e9ffff3a48a443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e48ea330732be1cc4dbc2553a93cbf5d6667d8105a56bf6969bc7770ea66c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudalea-fofiri-agoburi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9cec56418b5530a96164f7b5608a2158b07ee3288791b571da6afb725137b6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...