MAL-2025-167978 Malicious code in teagood-yakuza21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264f92cafc319c1001dcc9af469c6c2af292874cecfe1d40e07843d0fcac748b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161717 Malicious code in nacho-bunia-vibni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a436ee91e9b8c174db97a47a69fbf1a9fb7f23c2447c600990ebc835d4241b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-thfla-magahzfidgboli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f42d728a7f415fd486cca90b4a696c68be9be147f5f430afe2964bb184f2d443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyafu-tuftadat-datut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea21e3b86ccdcd32fbc1c1e3c7b3e0c3dd752288a61a9f456a3d9fdd249bae2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lis-ding (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 054447944c49ceedb8b0c60f34f054748d6b369dcfcd9c8b0c1eb672a6b68ac1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manuffak-angabofi-gun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e42ba9c48437e930a57e9589bacc6364745cc95ca7044ecd5e97846fedb2467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lala-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6670a4f4756894ec5f7c2e3fcff041ca1a8d09637372a703fe97061ca2469712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lubuki-vinami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b853e455df91891e3abf026c6964a3cbe935adc7570f563e2dda77aeb635cde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inagi-gvma-anbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c36b472e28989da81eea3d2effebd68c173b11a091a55e0be592dfcb9d34c8a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/ride (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6586a478d709f15248513e510049c3fe031907feba316a825d52e3ce794a6dd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-rahafheg-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c58a1097f84b2144b01653fc0f722d5b56bafb623dde15d0bed31c876fb8660 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotimi-kunubankasilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28da9b45b2ed0cd8f86e138984c5ca38bdb96d31c847e8a2c5c1084ecf1e63e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angin-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c92688ab891f64b4bde6242e68f3b682dee2f76bda12359f180e6fed5c44a48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e4a3e1a698adb00dbc8c43f3d90446eb9bb880b0664f4a09fc05958b085f76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-kalian-bautka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46322f859da8e5ff94b522ae44367ca3d88cea6d6d6f9c9b034783bdfaa90523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makaimaigan-aniga-guaag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebb977962b9bf174c0b8edae562a43e16e1632a150f31aaa6e94f7060fcd0659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f89e1cf421f01bcef0647197985c517b1214ac548e57dd3541e310faae87b28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-lni-pialima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0698d6edca4ef8b928543ea6fb777baea905161b5d48396fd8ec252e2c45dabf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lotaihmi-nakaanaimlu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd642f3a5388df3789c8d9f5071e175eb23d7c0544415193cf0c8dd1a77d67bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-iala-maonldzdodadgfuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c93931b9696a01b1ee6d0f5bbdf72e43517c03a05740b4394ac740dc1353c72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...