MAL-2025-166600 Malicious code in syahlan-poke95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70bb5292df2cf96f699daa28c5dd9460c6477ba2bcf1dbc93245a1f6bd47d4c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dea523c7a8c2b51591dc8c2787d10ea30ce0d89641014ab3f2979e246625c7bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudla-ofogir-agua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdd8fecb1fe8057e0899c987630a39c7f4cf0796e07e1ad25eabc5fbb67f5c23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irashi-sea-sswe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1befbcc9beb42fc21e33902c5284573425ba31360ada8f463b9be34761d727d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 735d193fba3dea5969ed1f7c6eea480df32583260bf7f30a904f0b5cbd8b565b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b88fc7e5278b92dc0cfc010d1271b1d3e4f2d66023866df517f44eaae67491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-ud-vamukbupalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a025f82f50ba7e11e6cb2b678d4d2a63dcfa71137ff4c1de09fa6fd3672558f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23066798e29e5cf6bb85c806bce3135dca253590341b68f76aa623d2c7b41b7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 120856fc2d12416d4f9e778f5129b6aec02fc22eaba89c9db94fa599656b9df3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehnah-natia-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98082ff9e24b9897757f7a7b6eac7450d40f17df0a32d875edb87131ba097e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afoafiagi-fag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17aab7aecf4906c0a33667d3724ffa547f293dc60193346bdd114df14e2cc8cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-fianuaia-jinanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d92beee8812e9f4d1b4e3ea40a365a0faed529bd2935fab12bf9e079d653953b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3d591f0fa6c337eac285f09523e5019907f9ea0c171be3d1e91fefb4fd70a18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-lniu-kanika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12d88837d3a016590ffb75a9b84d75bda29d6a4c24ebed434ce2f5b41fbec83d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losit-dilaubaamukabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5724f7e26ce22aeaa6160eeea503a5e8de4768fe5101998157401f44781e7158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mans-manapa-nu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 382d722435adbc78cb1ab592659860d0ea64e92df475b2c4163ba98fcf0b251d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 645bdaa7ea3ebd63a423346c979d92ff2a56eb2eff30d9e78cae905caaa99e65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iba-ota-umit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a226b4b9b28f581588a1df07008d329cf5d37322f527c3a0f4845d10b00552e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e69cc3b83f169162cce7c2f8777d5e5c556eabd9c9e31ed1f1b0c9ef0748ba66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a2c0702fc654cc00bfa3ac600fa8307403ce6788babf5e791ebe4189b026ebf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...