MAL-2025-164648 Malicious code in rino-poke105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9ba065579479e80605babb0de074d9f6ce469fab8ef26d337ed5c74a1705b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-nautyt-minahasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e6b791e6021d3af76bb7ff874ab6a7b419041bf02123226fae70124bace8545 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/kwnhghg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f3afe58557cd507d5df2dcdd99e60760ab53286c90ee459c9af54afc760aa65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flight-oti-ufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f09b6d3a1678be9102cadc83dca00cdad67315404a802892abc9b9897b936368 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-reborn46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1452b405b1af9ac42e2029552de9d7905007b6892fd3471418864e7b62ffea6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78887c3607155ce0b6541130c0c99f2367dd7870660c41cf367d012a7f20f6d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45aa04e06f7cba83d9e03099ee94a349141c266799605acc6f9c9ede2df51396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losit-bisauka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84fcf01133dc39ecd0a488530b79f95e39e987205f38895615c33d36372bfb6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-aruma7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51939b4c72508fd07ab3367d400f5cc13046312fb11de889bfd30d0abde17738 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ac05d83a3b9ad1f0c693edfd10598b4aa50289c17629164a446a8ccbc6c5a70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manuffak-angabofi-gunal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d90cb01f5c83ec4228c06d734f3071c0962a257f24e2fe3018dff13e80fd5516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f902f37988da365114f676235fdf18e491f5de25007c4ebcfa8118c60d4f405 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb3a9b3c49a9d9be8dad75f90d2142934c2b4e12056785248d37f54c094838f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 272b60fe69b1646768dc9983e73323c7a2940d3240f57d59904f20e09bf8f4ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilav-rae-naha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c32d629d1b2198db628578e4495f44fd9cb1f7d49c7e5a9f1ce481335d0cf274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nusdtafr-msiuyu-nurtrr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a87fd37f97f7c9b3184798307414b251b6bfd6c8b7702013dff05719f62d040d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-kama-bicb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd68a2698edec32113d9d3ab25adcab3e5e64ca3634cbbaea0e7651b6f82c7d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee413d710ef8ff5841eef722d857d42a482f118a7149aafbc86392cc00e0a44c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b12447435e151fe8b959cc23d89b87ca7f9772926c71d31c41f86c017e0d30ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e820925941f11b4a06f8d45b8e4ff8c26b5ae84afa3d42852277d659faf5eaa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...