MAL-2025-154383 Malicious code in diago-kamoi-liumakuakoimho (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dccf03eac50e2541342e9b40d60c87fd593ec2dbfb729504793637991448b2a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168328 Malicious code in tealove-lady22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 388042abf0a863cd8d64350943ad5e07ab6e948e8f87608b61a219aed0705b24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-amugi-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b00b2dc27ea8eb101e5027453fb76c3e6f767f8e5fb9449bbf6832cce4f633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4217b23a6c694366936386714264175fd48276abe40569b9dc64a0013b717188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioalgo-klp-akauakuui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f10b2c8164b88ea5c8ce634a08a1f2acd8554c9a30e7d1c581d5867bf2795e2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manuk-angabofi-gunalia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19c4b40749372f6e1a86e2fcf7d645e9d96d99e584e7d70333b40b68996aa1ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55bbad6674c7aef241ec0a145f0089dddc778aaf1bc1211e17bc06287436f536 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-aiga-iufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ac01bd39ec8790283fdf4388b824d74a21aeec432a92f6b8d4d8db01857d634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d2f9c2debd975432a740cc0d3e8fda8b33ce9ae065ad2b6187057ccc50d143 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir140 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9460948dc295ea20105adf8a637afffe27b48d6cb83d3ce31f32e4d07853b6a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carv-nutr-sdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f5efb54dffe3e8093211f6623f4e521fa3a1e350723479eef0780fd6b86ad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afais-fb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71df789d004c9c74da90099cf83d321be0c02cabeeea0066edae8cdbac2d3222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74ba92e1b8504d30a994cedad89223f81b4d92c4d5ff6ebb25d9fde869a2880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84e4851a566a5b4a173195fcc928cc8d7ab39f18cbd39706236159ebe09996cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arhani84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 235811b7e40ab52f18c8b13b3e6807bd27315728efd0e1a4c92b46c4514752b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-imgono-jinu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bc688e25959d29c00c03d06e9c0297c87d5a5c950dd68190efcd26a9b8ff064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuni-niaia-luhubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a70ea822cb503a3dad034f66559ef1dca2d75624c0c27b9ee8d1da06cd7a7ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78542ffef812e1939aaff4b71f3cff0ae756c821df5bedbb8abea2b7559030f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-gasd-a9as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7910ebe922445f09d1be8ac7c39cf0c845aea16cb54d06afdd5efa3121a2d0a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 051df76847c08bf2ef35615d57f94a13fe1474baa4c281e664c359917253c0a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...