MAL-2025-157956 Malicious code in lala-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8e8a549d4ff0e5fb26ba9fbcf3f13c8e8b1ae32973765cc873079a7c106d154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153468 Malicious code in avomainah-fagais-fofafoyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b23525df73d81215a65a37996869e7d430d4e05818647e3003d3d433e0feb32e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igno-jiugu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78dff1240bac7837c91f4a47f940fa2f5df02b8ab3a3c4e827c02ea0f6501b0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab69610d8c124e8d944d494386b2471fffc86b9089db509cdbeae1b8b6ec5eab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli135 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2e3dc84cdcfc8e48c5c2a8e0fe044fb04fe500d14715661f1f6b7e6f41baeca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaadgggs-musngi-mifuysts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1227f7d0e91ac98c04e39d64823310f51a714fa080d8726e6c460e5feaf7d35d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fshj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2930924b90de23ef79484abf8e592c084d7858d17c94e1ebc05a12c5ae387d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-taicu-busauna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 446fadf80e48a9d914d22c063502349d10d0f47124011a42fb9f10b5ecd5bffd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-minats-addutfdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f6eabdc620605420974f9a929b6cca2e5b2b48e692f4e08be02c1a5857c14eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuda-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecf5b86e62d614167e25f98d2e50479f5ea063e0091f3bef926784f949e2639d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bfbe2d3e3b55ec07922238b215ac61131375d419928842a534b2ed31c9f71b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97234601ef72c708c6285f3770e09582f5d13fb825d306af2b500025eb77f884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aikn-misualabaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b83af1987267f371b35bf3102ced7dea18d065f7fa4af17335bbe4264949fb09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scaaior-dra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19da8f6f781d1eab6c5a95d1fb61915285948d73ed9dab610b13f917854db282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nusata-budnajsadab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c9dc18dcab9fc1c17b55e4eba61dc958ab571833cc81e41bfd346ee083c7bfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e4435e1027ef909bd74bbf4b00fe9663c81dfd054f3d6f2e3b1148f08d7e7e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotamava-aaana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d37c0809c04b68eea0460c82dc441f6960bb969476bf5c7bd780d492fb922d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irashi-sea-sswe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1befbcc9beb42fc21e33902c5284573425ba31360ada8f463b9be34761d727d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-magfu-gomumia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98ae09b64dc4051109dbe462e5df349a6dc05abd6d026a4f64e1ea819e3c5fff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losit-bis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04799e06ea2ca4aa7cd19ad274e930630f755dc6465e8592277b785d3805f54b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...