MAL-2025-163013 Malicious code in nokire-nakala59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c0f8f3826c35da96eafdb6674faf96728e57ce1746cf3dde36b78be49fb87f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-miss-br (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a09a93611d5e4e6ef96574356f2e84196488c2f846540f7932a60655201e81d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudla-ofogifaf-agai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dcc1c218e8c7efa0d8b9167b930fcb611049bb2d8e729962c519fc12fb6bb7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ucok-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 293044cdf88d88ab9c2ebbe083f9185fe6c4b7f30a8408d8f4fbdc03687db481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manuk-nai-aaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4aeb42717e217cf237bc1eeea70da0c6c7e1a26bdc37a5e1e09e7caee40a52c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lala-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7bf0f942e03b3dfe35dec653b58d72685dc86a0c01fe3f3c4380d352da6e93f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-aiga-ifuafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31de54e1009940be29d3cb6c98b08936b426a899df6eaa370876c9a805b3aacd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabia-aligma-agbva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf30789041c452c967ff6f4e1207759bd0c58793d8e46237464b5bbbe3ec9853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madan-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e2c2bda3f63500e5944ce3a630acfcb8757192bbb3a55da45046a48574ca4fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kamoi-liumakuakoiamho (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e8a3f40539a1a79ded3e88f7729523cc27591b13e102b4620cbf99f2b850d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2c6af0866d8eb561fe628f507123a4b6b772175438dda7481d19a80ca57e0a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0df6b1f4e075542d19b35e1c57292ebc4de9d6cbb398bd0c7603893a5305e2f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b07350ed9c3ebbf9aa8a90f902dcaf81cf5c71f8f1b547ffc3c5970dc16ae64c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabubauali-nanlii-iyap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ab30bb41c7e9cc65c77425dec00d28d9456e26a6b353694f5f811fa06673769 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1131a5f910599783d9827a72e85ee68867af77c422096353feb5490d88c53bff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir133 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9faa1c918c48f40da2a3802a0ae04a91ee9377d003a819ae0745e92a16d7d3d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/tdisd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf9e4547d7b4a329f876d3a879e197a812c99ffa7dae5be034cd90967e281f1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-visa-teajawan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83eb0d21d1cc60142d96268aea7128343473266c1c0759e0883f2e6099383200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68470dd609ab5e7ac6ef163535bd2066889452ad5eb9949a6d6293507030b9f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-okta34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 273865679a994b85588fdb5af50bd49bddb0eb7e37807353469b01d7f8c48a1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...