MAL-2025-162923 Malicious code in nokire-loklok67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa1c9fe3ad04292bade10206a55b370b3e809157875a84f28e68e3b06a69542c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156995 Malicious code in jeep-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5727ce1c05575da526d6135f4c6b1c485e68ce3aceea15c114b834737fb3975f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5afdcf3c2353db90373ed72bb31c8ac0e457385563b3cda86fa2d9fa8cd60ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3934e32f5ef13e68e96c1d05fe46386d5abee7f443993fdb1375ba3e08e762c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lubki-nasimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a2e6e006eb2936c99be1d2d30bf75911a11870ab694ba34586af8bd33e8330f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fiak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6fb0c805b6e23d5bce3d7b3ca7cafd2133228225a27936ccaa5f1bf918969b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muyag-daifuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0265bb15ceac62436425fff4162de83ebb862adb099d96c709fb91004481261e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/falak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1de7630c2b5cc60ddc1e511bdc8214a4222fc13bbc67405092816785a9700b7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e07aa5087a07258dd8fb3a5de81b400b496764a755915328d6bb6cfb778f2147 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagias-dfafigika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 158ac61f01428a458488c353ceb28443abfdf391e7b335ce19a709ec3bbc1f0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b485fcf742dad795c5579c242becc06c58173ecebe3ada950e2643f50c3f07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b716a989729dda077f2d52c3ee91cae1a223159d6e411de612de0ab4a9c0c61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7dcda1ee45882e6932067816f6819e670fa1c438fb8bd42f167da17eff704ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-toafgvila-madasazlohiakofio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42fe229dad68ad15b49c0c33c6c4cc0da2af832c2241d6705bcd96fdf3183f29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nanali28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af313c6ff1e014d096841573516ede56b0603a39de43150a50314176bf26bf83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9f01791b52fbe958a129f5c4eea62d467074c43ccdabaa9121a7b3b1f05166f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e121d55322236c9ba1379ac1696ad69e1e17409ff4f2dffb72125fda72f9f0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in azhar-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 643ed396e727e2f82efdd5b5854b5d2fca628bdb4b0e84bb27b8a146d96e8a0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 256bc42ae12b4b65e0daaaf20c78bedc9fa3e40eadf31ed86df20e08ce903404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muyaig-bufugabafiuat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a89dd580cfe3971ffd6eaf4f4782e469499ffe62bd10db85c0b6d41ef20f6264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...