MAL-2025-165779 Malicious code in sau-naki-upsidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a9be09352ba5ee088006c9e1c5629ebb211848cd8cd80ebb2e432348db81877 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166327 Malicious code in sunden-dibuok-inuik1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6df3afc5f12c1c4cf4fcebd1e42398e1f4c8c212a0503ef906e242cd763360c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagimdas-dafogafiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0af590a3963d5606e24903cc9e4c1cb5fbcb8f22cbd8923a5bfc74eca95ff5ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-darknest8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020e30938e147eb818b15b19b86eafb7b12a80ba38c3d67b670882a51efd530a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-natai-yolarad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c41dcac1e515e763e7077e08069c9d06ac3dc47aaad8cd093834b4889164caae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f97e792979376d754b16cfdd96980289c45c0e789ed9c185d758a5ced66cdf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-nofty-gogiadoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff62ebbd42e4edea3556dc34ab5d8980165934cbcf4306bf787f6c43f0f6b1f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9fddfe9c30d5ee2f7f2b5c5dea88f67833ecb8b4a7173742a8871917720d482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-imgno-jinmanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e44bd79e192d4e4c2dc5fd5373281668a3393f5c2eca4ba951b1033d952780ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatidra-faradda-nutdardo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb1f15901383f685bdef628a9420d43a588e4b014eca2c20b21aa901c4885836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16820e333b8941ae3eb9123610e4b6c3c03c915fb73fc87492cecda16219c027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuh-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b8f94d9f65280dc844c99997d8b8cbfde8b0205f07176f338b21b0b62a1a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52931fc0b3223a761d7ee365700cb73c493a43ed2bc3fbba84d7e2608e1db49f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami130 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70120422202bfefbe672f0a350f7b42747589a79710b4e70adc0b609212b0687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a836a2533c19c15513f0dae7298e54b8bd28eb9108039a8a4bc66c08c71367ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32971ef1d4a75dcec2c794549e25318a87b1c16d8faa87979a832f309558de72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b24ad4cbc932725ee7d533f2d0782b0cd36b960c0479c4a90f79db107464bf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4195bff9e6e0f224243ad39a59c646a1c1b334947c4df7bc4faac6f485ff77d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 546a3f393321b48642b3794cb8376aa0b4944cc53c08e062a9da1e3335ed0a3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fd26623083d93013c37d9650bd3dda4e5e429c6a19794e77ca80feb24ef7d2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...