MAL-2025-166008 Malicious code in slamet-poke105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6d308ce83b9df62bb2ca491564eae4b7157612724e3938ffa78e7509bee2e50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154379 Malicious code in diago-kamoi-liumakoim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece1b716b3567acb48a7e52aab34778d1ef15e9a37e698ad53523c85ed7522b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ksoffgad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a6d119abe2425de6b6f3e54cce3ac011434c9863d88ab9e725e4a457108bc40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd561ad6ab5e8a1e5d4be51a5ea4718984cf12e62ee98f85fdd82ff0e4a8089b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusya-fss-s3a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e476a09f5e33e93e19027cc85214eb6cbef85de00da2af33c0342a1dd4bfef37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d835a2439e8e760ed809bb5f85253c6f651edee67aee376bf50677e9edabe6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 156e2fc3c8c22a28d4551043c7409b93179f49002c55f584e5c05b7cb1a8b012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muny-boph-sdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76f223f7a5e0997a9ee9a1af5bc0d4bfc71cb40a05a03583907d8c9242b6b575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be68d408a361613411455fa92bea3fa908314162ccd52a1a24183f1e13e1a0ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb09fb9286901ff7e40445ed548cf13d84f9833430ac5d061d8823766aff9031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9965f44e4a94bef7897aebc91b86c422fe60dd9a04f80c9fe80abd5323d506dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manaf-assssin-muaanst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a001bb612f9338e505377a33b9f3bd5c6d1479d44c04b4381bbcfb95f18a2e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b65927148e1a124702728d53a4daed2b068866cfcd9bea1ec455afc58310c593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41f557f3495c153db793f83f6219a2fcafc9d5e2768f730fc57624c3965b63a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50515c04bd512a225facc37076bca95b9c98b31c12b860c62d0e3df9091a6d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagmas-adima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7ccbde7916c7e3fea9b63b483a27d74ed5dd7b6770f37541902ed45a02cd896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-fuhouia-jasatyfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ae781b5d610325cbe1a338ea9e4cf12e9b4bec5f9118c166200f8767c8aa60d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 691fdd55a4b6f24852450a72c6571c7ee4748b6910b6f5dc1f40e3745ab392bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba4594522355e4ed524442bd0a7204b6f4509d182a00f9b6689c12645ee3533a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ayisali-ganais (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b5230a93ee8462136ee17df17504e7815d7fb40e74dd960113c8810325115e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...