MAL-2025-153481 Malicious code in avomainah-fagaius-fofaguyafof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d33f20fb6c106ee305139dd86a799f073300d43e9d2f732bbcae8b204ce408d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159762 Malicious code in mansila-iala-maolui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27a50c745775c0b617432502f83084faa304dec898e9af565ba940dd50d32061 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otgigaf-dofajgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 483bab7784e467c873f184257acd0022d7ecafa672fa3a5805c788f9efababaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedr-minus-buipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8093417e3c6e7c6b39ffe13e2d6b68cc437f3e3f7dd62c77b4848368ae95afe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-mkot-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a1d59433eb4372aa837283e6fbede20d074770bdb7b3bf6770f250ad1285b50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-tears-sda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fda57d8a37dcd006a983068ff3a7c6e0c568177bbf384b3bfd0c2a99fefe006f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muny-boph-nutrui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd314bf5337c96a95c8023cf132e395957e6a691e8cdaf87a810d6dc9921378e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/gfozsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa184be970060ffb77903c0f1454a0f71f3db08879ad2720b54df62962e623df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b5c92ce9902e841c387f7a603b8e8262c20919331d6ae83fc057118ae08b250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41118ae8bb72b7d3ba65c84bacfe9aea388e0338e18a38b9a50d2ec4ed38d80d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ingi-gotvama-anbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ab5d9794fcfc4be6d2736b9d051f07471698e108f3fdf871f3650068e82cd82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b9d1619fd2afada4572e4ffa9691fb2d85d532e354eec8443550c2a061e392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-uyilud-vamuikabavasiknauin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d84ca2cf152431b1fcbc10736461758a87eca65da6752f120f5f0f1ed7ec88c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutr-madan-mutriao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f637028afbf7686d141fdb56c13de57894dfd5d1d66afce8a6a059c7a5e9b36f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2b64211017de7365cb0212c41e62249b1f13b82307a513d864cf14d029d078f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b299852d53d9fa7c83fcc61f5c0d75e06e7f5d9f18739976ec0ab4c2aca7a333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7ce243bb2e70b2900e30158b9f45a7d2f047687b2a07c22b5d2f4d78b86d5e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85bb97b5f0e3c4d722d5b0418b070b72fb62915d76abd0576f26cef8014226f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-taic-alusai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71400f4d08ae33c1356c719b26038c29e9dea3c978c77f1762ed4f6c0cce8c94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zenitsu51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de58ad550d34014cc503e248bae3915761136ce8025c0422c5cac93924db89ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...