MAL-2025-158595 Malicious code in lookingan-namakiki80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a24f3d1327f2f960e450b4a852c71ae900a66543a6d3eaf88cc59c89144a6b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e86746b96759ed4d28a15a6b9c05ade0fbb08b831bfad71be5333a3bdccb59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ec1c51633cf19a011e906760d6da91755c396eee468f4b10799d539e0c835d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-nuyadtasfag-amaadnadsatadfna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 092689a26756584ec2635890a1802ad129150b4f90d478b3b1ba57e9f57a73fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ma-vs-munchen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4659ce9379f7c7fc415db03c8a877ecdd5b89f4dfdc289b87367bfc6c78cb1b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf00d75631c50a687d7bc1133453b69b4fe92f2b6a42dbb0ca211167ff9fb832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a72dc3771ab1230e9fa487ee6ca2ad91a7ee76c2281696d88e23e6d86c21744a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in milisa-mioyaf-muioskfp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1657d112c6131b33f1376e461324950d06ee7a5b6812653b4ba30c586b5cae56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-doki-uini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe6a24a9183ef5ef64c4a6a3f754868723b5a11d0582fee96456da2337250272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd496294ffe31f49863054fb5b981b976b377ab7c589d941a665b5f26498a6be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d35ff2e4484317336a8f6b70c453524171ff5f5f4a65b33437386d622a5841b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-dibook-ikukanamai1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 851bca8787651e5239233825bf71b2f4171a4160b446bbc6940a7de1fe832819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cefe63cbbf8ce41209bceb78d8e2b36896d1aea3f4c3403492d1b8c9632cae36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa24c152da4c4a4d0ca93f5e07e45d50cf6e253cafc1daebc019bd53a3af9b6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-tuea-sdsf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2850d62609d0985dc154920bde50982851d26564e2f633919f86b9076cf96d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-doki-uikaynki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f4885dcf5655342a53a46d661f9e3a1e01af2ba0518345ad37ac3726cb2bd86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84e907638d4179bfc0ecf3c098d7ff92c2fb4fb660f91dc5cdd7e5cb7ad9350 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60ee9d2f711a4550e86541069a561ef5413c1074e5edacd8fbf5345408a4b886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d230badedcc2ace69cfe9af425189d90defd5e73e3686699b6122ec8bd3f144a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5edf356c7774f05a5d79b7073c8e5ed781eceede2586341ba9e7588c4bdc9896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...