MAL-2025-153099 Malicious code in avminah-fagias-fimaii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce2fae6a67b7f319b7594762eee721980dcd30906928f784102ec2e2cf89cde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167011 Malicious code in teagood-lokina46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 307539ae32656aaae22efbd3c01fdf32e200b826a00ef3ade6de9a05436962aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b135a60d795b28d289dbaa7aa9784382e965bea841d7c65659d67dc281ee470a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f189e725a2d82d3c7d71ab5fd60956ac390d0b896a8ce7eb49b3c220a0799fcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyua-idust-daajua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e77667d1045cafca6b0a72e389d2c87a9ba0b436bf461a2f685a87cfb8da6422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 326c29aa9e7c00d8e7367ca089addd82b0b4135c3c2f4e7faf7ae6969d623f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f3848be3adeca50cc4d769e6253b8bb5aafc9fea154aef8972d39874860ff5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-rahfeg-nahahgsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e76962255f5715aaa1f9df0e01606c66a3b786345e778a245e009f2f6b44f27c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhufayu-tadai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f26840fb2b4e159567aa518d3cd0e75b0b2f601b828ed03c3865301e6b64066d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nufoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e63861ea3daf5d6c31dde59ebfcc1ec5fa34dc74201dfe9c22d4595a227ef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afbb76acd95797a55e733db3a6341dc5350ebfce1af250e6cccc563c8dd5b04a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87706607c09ae8a489e19ae71a9a239cc2e6dae41c0410716bdd07fa7d1929c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuyilani-nikbamia-luyabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a427184b33374d2b20efc691777089416dc398ed1b005dfd1e9323f5742e61b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-mar-safufrat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0e3939ff6d64a8fb566a0d366138ae78564b9d20e85374247afc032ef21b927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed93a1ede3d71ff8d9bc8ffd2af7134ff3931c4b078e388deaed016dca038599 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-ogauf-doikofaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 461af6f73804e2023a9ac9e1618540403351e73e589aab4976804f29ff54b57b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-fofa-gafsaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b72760514c6272300cd2b920c35bf6dbebb43de921f6b3b2ad3665327460ad7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otoiman-igaaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1feddde447a46a27014dea0648a558a66a194525dbea098cfda02544cb8b3bf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3ec97fd4e130bba5f71ac763729ccb645c27a4416b2cf5b60451f058f8cf4fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomin-nosuadfaju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9444bfcb11a4b1e462c58b37487dcebf1b3de3e4f3a0bc4694e3518e32a53b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...