MAL-2025-168881 Malicious code in technical-alnbio-tolanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 623f8c0545884b091c4203159bfa1525a620b27cff6b778bf4b7fcb0819f1f2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224eef888fcf06a7e7e3a914d631a3c338b8488bce4997300a7ed47b3236e69c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-luniu-kanulanianiu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca71950b323c20b3b3aa4629acc18d017d50e501edb6f6777134d028d74acdb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 221e8034b6b9ce2ada503834366af387c756033e5b75007add70242793f26a67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyifiuza-iytdut-daina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c64426d29dbe0abee8ca71f5dba349d5a27b61ce8f7c22d556f555eb7ffd0a67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ucok-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7461d16651442411e884d15aa547e9be793a270fa4ac5f7c3c90af7d06909b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92192e105aabc26a8077a0b8c8100ff2f141c06a0971ff94bb730f07f00b2c71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec58f13a98d26d9b1e94f16ffe18f9652a310b3edc2d5f1936b1f0be2c5d268a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3fed1470e22732fa58b8da959db1ec34a2cd47e635c7a4e13daf66efa227065 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 583e9463a2fb96638c882668a0356d39458d67fc2bd26e7da25eeae3a329c256 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d394d63c9eee98f6c29f7c933adff89d5a921b18565bf2469029519851283bab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-butya-tyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae5707a97ebf3a7984b3e65773a49668550bcf09820ef545e1a019ed296dc4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0561f501d61ce66087d5134af04a2c505a56de2557370d6dc84ef1a35e927dc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-kalimasa-nvuba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff7c323dd5d992b98dc4e592b9d4efc2fa26958e85c2b72bfecbdb0a82a48169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lumi-kunal1aikab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab2b515d13ddaa48d96e10e4d8d33d5f9859a431483043682e2d48e1c9150be3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3157d282d8fb5f3674fc5ab9ecbdc2d12df4bb3651d74ea73f15dc9fe582f3ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-milipe-apuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 982ee7fc52975e8bce216d240e3fedf3479491f492d1de8730996ceeb9dfd2aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902319a3bf7446f2af4317d717d199a320ef5d186dd40858be812a18924d28b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oalgo-kilao-akiako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cca41a7cd696622feb6071529ed1074a5d7e842aa64aaf12226214a6650587b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158412 Malicious code in lookingan-nakomi6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f5699869d677ea81687e769c7b26e48549e940d76e2463fb93ef68c746eee3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...