MAL-2025-158637 Malicious code in lookingan-namakita28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b3ef94f4842c098e11d00be52ec757ab861d4d331862a66c54ba4578e897eb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-nofty-gosfga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 749bb9edef8bcc02c7a5fc575f9cfa2097a9dd58e73a2e5726daa097c6426d80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ff6380cde13a406696fe8594661170192697769ce6129f4d3178265c24984b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 001aecc437a0074687fdbca8f89d44da867790603181991c9ff7c88e0ba3efc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1640dd5d007752f05c3b1cec429c092137ecf81811f23643867d119f2b51b181 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ayicaku-amha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d59d0dde523b93a37c4118ec5f45f60c5d96660c89f8875707b4dc5fe2810c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8468067958e30f4ae2f48b4155d3129ccad9e04931fa47d762fee0581ea58e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iba-otau-umita (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4cb42e1ac83cbf30fbeef50157801add08fe8117c7e3ef4deb042b8a8862060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1b8c4da48df21dab544fdc11690ee3dac4e872aec3b6bd42e27f42f77882ed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-uylud-vamuiubaknauin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deef4566ee93db2a10596ec5e6fd1c3c1b45269a30ce413399867813627b693a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aviah-afgagagfis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e32e9204d979452dcec28f2772802f707b0f2814870c61c9e083d3a2dbc9872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 480157f9876015dc53a0a62e2db9468bf7817a6f902680429c9111cb5c506718 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3aded1f8cc9f8ad1b0ad29168e6cfe21a1218f02f8710705d67dbff97ac94c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke125 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7017f43a63f5371e1a9570a898895369030f0e0d56bf3b6a90edcff1faa966e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/uafd-gs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53331be1e7deb6bff27194a7800fce273808318bb053eedd5ab3dadcac3344e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e427a5a8c68dda2a91319a38e74a6b347b779c7207ef1576882d29621bc884a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b47027f2c517e22bdf6d0af204dcf99061f12b5830fb92dc2ef17eced99a1015 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e56c72a0fc19e7137518773361ad525870b370bf456101cd30371e4011d6811b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehnah-codifad-nuftaru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d7ef4020e58594f1ebca11fbebad3de9450ac3e177141d48db576e54b829337 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08f05b4c27502b4b0b736c48a04bb274b2f8f88ba056459d219371d8a24ac166 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...