MAL-2025-167635 Malicious code in teagood-nalikoli77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e5d80b41a1ddfad735855ec03d3c95c66429b15d2c249c23803e2af4c956e30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-dok-uikayanabaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2916a67cc649c3c7180615f9669169498bb0345375c5fe9d2b5582aa6a1255d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84fa737bc4e1df0a182d3c2b816be370ae2cfc704fc3abe5d53198a03487314 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fa4b090a929bf5a599b2b55186fc42a800f7b40bb240be8a4630e6d18b0bb40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ewa-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9442d336878a3ed8f938346ef15bb27afd5432886ef9201b718fb71003f1fead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nutai-ksdyasaedi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dedf628c1b45cceacb68b4f9dbc534f2e2a00d0026bb1e1699ad1d6859c0e02a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4a34ec0024a435c9e3e90fa8684f637ad0e31fe827908b35df27791add74a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kore16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00d5f46288e69115adf8ae49428f4a502835aa6ec8ddf7579dd9a3a7f83596e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-frasu-ofuratrau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b70eb6a3fff04f5df391bb447f76aa40674708c65ac58686c1bf1bb86579c879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afssa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 289e467f0f679cfddb2d3a0cdcab6538c80aa325be584e90b9be5dbd400f5a71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabulanuli-nalaui-lubisy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e06d3899833f3ea27c1cfc682fa9b5136ec272e54e55847313481e3a60f8698f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasution-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fd9da15ea01b36a36ea9d9288cb8364ca832a90e84f2e14d273f4daba4d0666 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f5287b9086d6fb78e4284f56c7a3a15cb7fc9cbac7994144eac3146517561cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/iyug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a08cf248796e5310ec3c2669b74f2a8e5bae9fe14f9a49bed8822b7f98f12c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokirne-asaka5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f130833cec6a02d4c3d596c5730fffa0b2a3a23458bf6cca5bd411774678eb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-mkotti-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7883dda51d290e3b74f3ee4144309f4e94a598264a99b8f709ead46f517b80fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupai-lulikont-igugfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f9e432fc546917fc1de7489501b9354eaefdb54ce62f7281256d86a910c2ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tactiva-bna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 795896f4573158586a0c371e48a9f8bd1ece4cdb775440e6aeb9406df76764e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pajero-cir14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55b1f290e051bc1e300e66f57c9ee26eb57d122ae728e9115a23c88d2b188b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igimamafo-jai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4910a036863f9feca32f1b2f86257e58847c1d82a033961d1aa337901306baa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...