MAL-2025-166270 Malicious code in sunden-diak-nulamakuian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c57767814c252ff47911a4698683ca5467c135b53b9e5c93320de9b08872177f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-diak-nulamakun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 184f3f0c3bc1774c5b77c497339b6ffc140e51e6af1ba74b14091569144153b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in demaf-saintfea-nami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8e8455879182b51b6db759a83d077fe3eca615335665048502d7febc3c158e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04a5be1d4cc1d13d578b2cffa1aed666856c8725f1cc604b749048e2874e6eef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makani-aiavamoba-ufi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99e1fe09fd3fb55079c96214d03969d50a7a542cc686342b56b3d5c565c28fde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-mandar-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9891abaeb77393df1b8cbb84c3383d8067847a5aeefe9b63d27828f9d1165b78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157338 Malicious code in kamasada-nusta-budada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e54d19e7e38ef83308e3ee426cbe1cc2bf9e2c65bd4ce5d86b75516b4efb0d86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-dana25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2699128b2f19b0f0307cd472b3a0edeee614000aee0d2cf1bf18e7e19fd3344 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc2e4306b212ecde80d9c9076d3b5b4c6349750b6353eb49cc590d23e665dd5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 752850969210c11566023723de5d2ebe929dcbe9e71558a714e7ccdd2161e9a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iqbal-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b48bd7fefbad4977dea68a149ae371a49380a9dfcf9a9b6715641578a6f9bda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee413d710ef8ff5841eef722d857d42a482f118a7149aafbc86392cc00e0a44c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uarg-mthai-sufaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca1f80dbd2561377e44cad25da093dfcc078f5c0212596ca29d19e09f474af25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa8d5a2b46272c9b37f7bb1ae39bdc67c9cdc0bce7869e12d7475598c1c93043 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-udik-vakaali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33161a8ca0ed00a68f67a981781ded0160ef3e16c9f42c044cb924e239df79b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabub-nalii-iyap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcdb89ad19b7fb104ac7b5c9157ed5723d4a509a7dc3f9aca0f012aa18257dc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-fridat-fafuada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cca021d7a6a277b32cafaf32b99922a1f91974f8622d3e551587b48b6f14e99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf889801409aee1e60b80c203549aeabd564161769b68e736c6ea46ee267145d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aimau-uunmio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e274cd665fe167ab867976105333eeb03138560c9114165cbae78e7d2c0e835 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc654884fc8cc1c29e7a9db540933926165f6f6e984ff576e0df773307fd25c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...