MAL-2025-167099 Malicious code in teagood-manaki34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89d729bc9dbaa0c913fd247d775686fd686f8a23327abba1540dfce6b170f3d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-nuyt-mantan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c5a8dfcde6d05a01fd39b7f17a5fe63d23c339ea92dde1b9696824ccf70ac46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-toafgvila-madasazhfio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118933b613d5194a2513fbeb2d8f9a522e84c67821e1933ae172624a285b4300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagias-figanfayofomka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d0db9582d55474a75040b4aed3e5157dd14f9de59cbc746958329c0cf575c61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nustar-miuyu-muicac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 422a8c2048c34d9433e4bd81672c1b01fdb1b11671eb0d47223e2bf53b0dc962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabudaaopa-muya-bafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c4940ec59304ed46a5a161d886111a88cee749ce4768f172a2000bee03814a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lala-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cea8aea4e9ef28f9753dc58f79f85f62171acc7c6223729a0dafb62cb86f851 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-fagais-oaguyaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ec8345a1e6c894188b38f16aaabb54d294d6ef1965b32380d7aef9aee207177 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upilka-lukzii-ilakuzou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4192492010cec3e5cab25c039c098522c6c29e5ec30700dfdb39bf47e68ad172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-moilope-araniogo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54b461b2ae6975bb4efe3bc1340f848e4d0f4c612c50b9ec58187ee19cc900b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afaagia-fa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f98983b17fbd6bf180dfe64838551592ccbbdc52275e927798606b086a8cb2bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsnu-lki-kagbdsasodgoasdfdgdgdumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3043a663ebca217f79fcb0e991c2e89d89fad87c8d79c6e17d33c70a943b7449 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-oip-tungg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965e93c75d941255bc02fed3c7e69893aa25f797aa1620e28303f11e2d3b9528 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2544d805dc756a0c23365ce011c66ad516b9d0b79bf1bf75ee11227d3c604a03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munidr-nerf-minu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39d8d306dec409c35d566dfb67b2187c1ded9f40a7cfdafa6ad3b033ffce9897 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3e0c117e987a0cda082c6e9a2fbe7ec6887653eccd0bc1e1ea436a6807f1757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jimmy-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfb8b2234fffb702ad599bf0588499a213818d3ef43f029842206195b0e0b2d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zenitsu27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11fab5270db1a10f0ede6cfb429011718af5d2af8fa744bf22b78a8813a076e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagias-ifiafagigaag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f31cb205400b73d39ff5fe2efffa5ffb0cd75905f55d2ab5ef499f460b0f481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-amiab-agu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23a4ae49c263115c9aff315516f7bcd2c9f7de562ece682346b51a0ca9512602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...