MAL-2025-162705 Malicious code in nokire-kore19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a501bc2cd166aa54bff3e6e7509d98e498502b3832b3d26d0714d987adbb532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157459 Malicious code in kapvino-si-fag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25a8bab6a2283770f436eccd943578153d490cfcd9399642da8ff0bcd2ee12f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuroichi12-dfdhhjf-dffgh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77463a736122937a4fb804d7af438b0ea506a41dc003d033e94057c30726127b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksunsu-uyilu-vanmiun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 514df3a49f1d933b70f1c02140d00dbb8e1e1c98fd674b96ccbb7517f43e01cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bufpani-muisyau-fanmffiafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4d80608d3df9fe8f804facf1ca9150d2cdd11c76197b33cf0d674325995f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansioda-nomduai-mungu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbd53e95a297642073048aed37f83cb6991d523948efd17bde31335ddeebfc96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli155 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dd231e16f1d9f6d76f887e73849f8e43f38b15b468fafdf9818cf0c9087fc3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63fda8bed46acbe44e0e21745af2cfc6cec952f7d62692fd1da692dd7c8f377e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed1747b3e4ff61af9fe5be7ac0e16e86d18b1fcff80d0fc0c017b761b94eb9e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-fragagis-ogunafoda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ccea10d4a4903028dae0941c6e968c8fb54e6a18cf40ad2aa5284116cbe60d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nuyata-buad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24b54034548d6144a32a867690ff5042a61725f3092ab3e0170b6202560c963b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akanabi-alaah-aimava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a30dc0fc4479dd3795cea8dc062294df4f903e2d10fe5a6a83ac594bbf165b34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-tsfdaa-t4a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca231fa8f37f9f864d6bc17c8d8f8ff899c1968a7fe9965d8733d7266df7ec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igno-jifag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ee99375a977857db76fd7bdadc3ad615de3e08ed32ab0462030d4bc02ff45d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-tears-sda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fda57d8a37dcd006a983068ff3a7c6e0c568177bbf384b3bfd0c2a99fefe006f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ded3dd88e846496ec5f0563ce1532c8e4b4c6d040c837bb04918791eba9437bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lst-diunsaivu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40a7e0a15ddc92878aa97db418e9ec07f952a35ca42f4a3293086856a0fcb94d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nakomi34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c107e07de1fc378445374e7dfbc1c925148c0285eaebd2d2ffeeb62b2452b2aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-urt-efdus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c455cfdf4bfed4d6bb8e674b73b85cebeb37cc6551b147b5d4363ccf036fda1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ac397f11739cd0bc344471db259d6c1481ca29035dad9f3a1557cef3a705d4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...