MAL-2025-151795 Malicious code in aiboa-miolipe-agata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbb759d83abac69e97e8ccbb6fe6dc7777a41484c17b34d1d26b2b2e67cf6abd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli128 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb6a1731fede7bd9543a874f279cefcd68023422dcb0fc8a2c3639a4db664d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losiat-dilaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd82296ec1b069df086d3c42da1a9cabd88be4f6659cad2565e94099a5793de5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db9414a291d0219aa8f0af7821b75b3fd6b4c34fcf41dfe3e393d86d63cc309f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedr-min-buipenajaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bab6e8077ea60b4977aea30022dba0b1666c712f19c8bd9b96b11c59e3f14fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abeh-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e7ec35bbbdafae3b125ea464ca57c960e8c21d48d128d25871abdc6c803b55a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685bcce37edf19526d41758a89e13f081a2ee6eede3f886d6e88594a8f22cdee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zenitsu38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34be1fc43118b917513fd3394428086750d3e293c63ee403bbb5fedcd0450b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b7e1528cf7b771c91340bb92c5ed473d07770d1ebfa3e6b73a086b73f64104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-sfaa-ters (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff2428a5b8cb397dc5936848b8909cbba41b4f6b995cddfebef783e15d25b416 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-okta16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1580e43ef2e0d44dab482ee9b997f6a422f31ec78a70f8e9ab0dae8ef7eeed8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutr-sds-bastpaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c86f37b25bb5ebb68644085215312121072af4b708cdc02ab0159cdd8e768125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arjuna41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24e445aef2e6c8c6b54abc49911d32a6bacb4439942fc1c792fe1ea5da4b205b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-urt-eus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc58dc4c84b3c525e840edc604d6136fa4da1d94ff17732b8655da340e6eabf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-darknest34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fbd7d6659c550215f9737424287a7b53b6b6134c164a7b9f5b60316bf61fa92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-tfla-magaziigboli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d75a184ca91a0f1b4a793c77387542e882beefaf7939b831c410e02e9718bfa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abang-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efa0c80501666e125c849fa701515b70a48537c731e3939c5b3cb777e5726cd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27349d549bdbf4735d784fc1018955f36d1b1ec3f03f68dfb4b6f38d6177dd05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodmanmax9250-fun-create (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8284021c76041110bd838e308b5ef4cec6b48b5ce0557fb81ba06cd3250306a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tear-sdas-rc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06592ce6521368e96a3555daaff61a284130165ba775edfbcd0eaee1c228f9bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...