MAL-2025-157775 Malicious code in kuinsu-lukoi-nat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf27cfc972394e5daf448ceee15d349740dfb131ea4a18790caedf9c414e3852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufi-gfobai-jagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac9fd0abc2291a207c491e3f13ac64c29c7393582f2b616a9f1337db4a1fe0a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siregar-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aedb6a290b5c6c95a31d32fe767a8d150476540eeaf16c7f16808f2ed343ac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyua-idusut-dajajuar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a02c2deb737a22afbf7459d910d1df6d5d5aaef337959a82c0eb78d773e00c95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e7eb55b07daf335a2f75e032e4041c32e8b2e6ab543d1da7398861843d462ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ed5b05b7f16705811c23abba1bdda11ddb05e06448edd96f1bbac7be1bf233e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25addd62faa859d289842a62b456cd13cca198fd3a481e101cf948d23aa9332f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabia-aliguaafi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb14b0b955ed32fd9fca05661b2927fd0a8413fcc41351ca2183447f92789f92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-jda-ssdfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e7600ad4c46cca1afb9cc0b7d8d60b7852071f365bf51ac95718d21b8874082 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ewa-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e4f9113a69d48c0dcd4676d72b042061f2c213b20f618c0c8f9e3c653207537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0638eae12e41420169d6576544c156da73d1ed0513d74848c5f6008ebd8ee15d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dea523c7a8c2b51591dc8c2787d10ea30ce0d89641014ab3f2979e246625c7bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iqbal-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebe3c4633a7bd3bf09835100f371751030652b639635ae3a4f6c30619b2fa8b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 502c0fe908bff8e308d882c0246ffef6b2509a51055716afc73f72840d6154f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutaus-mudiop-butysd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62e3c4246ab8374c280dab00274b2e82bf134b46ad18105822753dec785ed729 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-gsad-14s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11fc4a24e27642a63f550098a91566b93c65838b07d632a321ddf3f0f6d67d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muyafig-budafauaffu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 571b0c4777b12e0ee5833f3dc3970eead5ecd2bda6ec892390b044e93a06a000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibopuna-mobiple-amaidkhora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23a8bbf3e63361b8119ee15937c81d999c039830e9db6b18f4abb4e4a84b8cba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d81bec3c8572fb79f01e4570bbd7c6070661c71ffa5125ee7c46dad1d777002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhuyau-tdiafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea98f9691899fd5c495f769882565b9bb9dc15242588f84a11b5f9711aacfeb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...