MAL-2025-161235 Malicious code in nabila-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902cffb8755d47a3a211e96492778e03a1adfd9d9c9f0a2278d9ffbe872ca4a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170518 Malicious code in verify-ticaul-bisusayaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 510c47dfba0a56ed21a75451a734cc8e689341285e605b9037e84697606dc814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jelek-rasismem-batu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f551f4657cc92ddc37f8a1cc9c10eabd121b1f2db5e5432bcd0e41e61ae891f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-dana25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2699128b2f19b0f0307cd472b3a0edeee614000aee0d2cf1bf18e7e19fd3344 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nice32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b6c50d950c3e3db6496969707f3079de9e1b2e8fb7370e94ed89ce282c92cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aiaku-unusi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cbe0a3fef7b374d9645dd503e5eaf3cae2f30f98605551ae69983a196387a86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/falaskd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cafb610b1140b26d7b72894d8c16685be458af7f38aee6358bec8a00b81a028b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fa590bfc43b89a63feb46aa8f4cc5ce9ee822966bfc9ac571bee2271de0fa65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciaiu-idat-doauuufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a04fd8ceb07f68905b6b564ead35751f4ec780f05289a5c5340725230257445d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losit-dulyabu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aa71d6593e33968aef0bb873a4cc35b883fb9d597768eafce41cc567d1376a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d5cd5ff060a97efaa2faba6d3b89b963fcd3c4dd868d3bbe4066439de6f4e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mundyas-buat-buata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a69a9b583de509d405cf60f35daebdf6296368c06f03d3acce36a776c8ed3842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf515f59afe9e6f444a7df859b0a0b5ada5cf6b699be3a599f16af1f5ea9155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afais-fomaaghog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afd74fc51658866f1465c59d8e06fd970cc6a9383b2b9106310596f2dcbb3906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bufpani-muisfyau-nau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b478e03660af6be2e983a9eb8e54d374f1859429bb4e63b6be94e56816a8962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 934e2ee39c1e23b437b629d821ea39ebea73109fd55069b2009ca236a5924aa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 796cc7d7f630112b08efde5e788c1bac8dab419523d36fc33a14985258036928 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nanami36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ef2d470efab2f00991195b2093d6ee2ebcda59fd4dde1ef0a7fd965f68d25b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/koad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef4ea1e5c258bb58ec8ba4741c9a2292d912fad98b7327953bdd433248f964a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manapf-manuta-mantap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f20521cbceb786757794155840858514e87fdf4a40b80e9d5139267ccef2372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...