MAL-2025-171695 Malicious code in orbitdreamer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d78e0a092777c0f0f306620ddd6b810026cd8403b4c8096279d67136277d850 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72144a8dd0ea71f0e930499afdeed14164f488bb243672ec39915db61e0a1675 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-afati-ur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5401db7eba8518d6273f5ee3be78cba5e934193a42e4d78820954b68b8d7d3fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01f9f1257881af21b8d557c70b4f288c99529d6c7f39526e0c22f1ae50f08d34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-reborn39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a2cfb6898498b4d6c052774e2bd2a36fa745b244a00720441ae1725328f3c56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/uwu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89b8f1a9c600e6e12cadda516f83d4cbf089e0320d3554b35bfea9af8a8e881b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in milraoa-miopa-muiop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6864406063171a50614aa1f8780399e6bcf4554af0e1adf0410c323181a42ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc480ae2a4389aac8c88bf86dbf637ddf7a0897b1211c8ff0738704eff67e8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tadashi-tssu-tad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 197c46058762bed6745d325bbaa2f2a9373fc8dd5d2bcd14275f9f965dde37f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scaiasor-dra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc63bb1011bb6a817c8ea4671b105853c15f187a8ddf7127c93f561e9a9ad48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ee33b3f96edb94f52e37d543ad399c2b7a47abeb07427228d25c8d178852af5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namada-kasito-manuota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d19fc30b84b057e820d28d8d9cc4f9c3a6c27125dc2d327d91478157d7d41a8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 927da8b1676c8e898798278bb4127e9e2e17e91b8bbe3e41ee2d4c014e1feff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ucok-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fe3781064dfd3568fa33107987ae55615cb15bf49abc82d648438420a1048bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-diak-nuli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00adb96b59c7b5d230842c058e4eabc84a3d46380f620e81229245f9e076d7d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lisa-atunma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3d3f6543f147b3cf90024ced16d5829c434edc7c90ea7fdee88f5f035854298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f565ede0f0333587dacb23409628c92e26ff9e81eace816afe4690dfc92bc8ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-reborn37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3e645da9eea3ea7e7c7d10b2003e951e80100c25d9d5c2008614c12170fd63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oalgo-kiulasonlai-akiavabuiamako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d359563ccdd0bcc3a27e35c87d914237a4cd372647353f4ecebd5f84014726d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyua-idut-dafahu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aaa220270cc1414bf0f3664d9f9030a8ea4882a025d00f3b32283eedf86bc73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...