MAL-2025-153837 Malicious code in bitha-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41b252dbe7708942f292119e7a561381f0b32a6127968c59e94efef820adeeee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iomodra-fuoa-jafuua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d1b840d854cef0e33c233b6fa06fbabe657fd7ff52d7b2517efc6453469bef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lost-dauvu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89514a6fc3f526d6af3b1ae675bc61e960bb3ae026426c8b15d6e4bdb708a7bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e24b67094c64dc96b2a475d07a0c4c324c026d6c3afd275ea67e39d976b61354 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a24f3d1327f2f960e450b4a852c71ae900a66543a6d3eaf88cc59c89144a6b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32e7279a9468a9d63c6b96992900bb408b6f084aa809ec7760fa8a3a86db8b6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ewa-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b1d0075214d4ad0a31cbadfb1fb363e145167fb452298e0d8a21f54959b055 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6759c9b0fe0f37d3e11f2585077e760426097fa440e17708d3a3e44bfcbc3868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ronaldowati-cir18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 388908ca191557e51a0625ca721b72e4ad50bf1b7345e3d691f2255aa1dc5561 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-albio-tolimr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d293cb8e35e146bcf3767dc0a03c97729ff1db3b374196adaa8028e55f131ba8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymera-manuyat-mnad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c1e74fbdf0f0f731d7928daf43614722f758fc9231317e6871c4b309b5bfd11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-korean8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed9e45ff066f4c13bac8346b24ab11316d89dcf9eb854ca5b6d9e4174dd7d404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e2c3f24d61e49450cc84897d3b35d0852ba190b53d79c9300ff42e3a9332de7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nice32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b6c50d950c3e3db6496969707f3079de9e1b2e8fb7370e94ed89ce282c92cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotaizmi-kulksimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17752cc5d0b7ab277396a1f12d9da918b698b658406c877be853dfc7d413da4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manttu-nuyatassdfi-muadfiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ce0e954ddda61a75619e42f6362a5499842c7f8bb20460405b712bcf12f82c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-ung-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e981aae59afc721542c160f5b115b7d2b8bfeb43bc7ac2945dbc60c16e292fe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naut-tyutu-sdsaff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc93339622a60b41ba66e8d2c523d4b2f9ffa73d071c3cf58c916a616a33fb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ed9498fa9abd9a6af0a0abd15a1b80aee26c365eb4427d44d59ceb73ee6f8ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokiragne-afgagafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 328faab1c0ad4cb9a54fff3e6a6097fda51015df96105f93578c167516044a70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...