MAL-2025-166886 Malicious code in teagood-lokika23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65d5e785dda08a4ba5194392bf41be70b795c1a610bcb51ebb4f5e20c319b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163827 Malicious code in nudela-rahaffheg-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5514e3990d02c423f5c0d19f50e8dd656bae0002f7c659b988f3bcbdd176f52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inagi-gvma-anbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c36b472e28989da81eea3d2effebd68c173b11a091a55e0be592dfcb9d34c8a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e4a3e1a698adb00dbc8c43f3d90446eb9bb880b0664f4a09fc05958b085f76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5938f6165a44455470b2f0b3e287fe2935c73474afb1de277447c8b7674de7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-rahafheg-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c58a1097f84b2144b01653fc0f722d5b56bafb623dde15d0bed31c876fb8660 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebce55d5af2c49b6cd30931e532611e60e34a792945291c7c40044ebff0f7d8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51fabb5dfd6372157913a74d8d46427c7aa2b7dd4b9b110bf08e779972e16904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gurs-uyasfts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d3ca6c67f1aa210d8af1e57a4e421a1b02da9821bbd06a0c6884c81a57912f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-alaki-malsfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 584b5ee0fa367fe86a5eda6469f6dfe5dafae4ce406736ef6ac7fa7475f71bf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-buyada-bua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f5ae5497ce9872364d7e9716e1fee07c5c572c02703e7685fcfe6f7cc91a9ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lkui-kunamlakmuib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1366a40f64cd28d85f8d908ea87b85b25e04b8329fcaf798b9d485ce15ad9c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manuk-nai-iguna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e082b9ded7f8b73535f5586be8425b78d66980e196655dde2c41f45a61e0eb23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a30509c490e8f2112b57eca8930e160c2af0ed7ed1a7defbfd88f77785ed2e8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prayoga-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 751b5ba5e5c4285f390b8f0fb473c498dd8fb0dd6ecf5f80de767a45ec836047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-ukasiamun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57254a196b752e0346a9a7c461156641289aed3989d4166fddb5e58b9679af7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-thfla-magahzfidgboli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f42d728a7f415fd486cca90b4a696c68be9be147f5f430afe2964bb184f2d443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyia-iaydut-daina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a057e94b830ba8e1807669f78a8aacf36dd345bfc63d6b5001915c212d092b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-al1f-dareago (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca9a24023a0eff97407a9322658e29e03dc75a3c0a67e363ba74cbf61f1f0950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 620e970886fd007eba5d49d01b472db10a5943f9f3398d058c5b96399fa22a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...