MAL-2025-157944 Malicious code in lala-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4649ea94558666fbd3a67762f35e98384f79a22e631e64240b8fadc4bc9e323f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/jisfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e05a239d626f459581b846cf822389a50d1d1d24ac39a7d32eefbb20f9754b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-fuhoupaia-jasatyfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478ce697d131189faddc7503cbee91c4fd1010c8b04d4fc24352d9b52ff1f4de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c26702fb24f0a2b66317111037d1b367d369fbb803b8382eafa74be14472566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a822bcddae9b9031c2770824dea40b20bbe893f71238100c346c60bae3a2a8c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tactiva-mechanical (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea755cad73ff37b99777376b680e2031200e3326480d44bc4b31b3fc0c7883a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotama-jamanana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58fcdef83836d5f1b93550bb3176e025ee785b5df92c5f9d37964593f11a8142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lukoki-nisnuabutabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6792642cc415eb7378e271d389b7d2c5cf083af81abd29e27e6f400b7ba6d41c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sfga-trud-mutiar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 019fd420e4607db13a6bf8574c6716bfc36d51ee4c2c330a23109cda25e0437f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/aseszwassar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68f595f0d22d06033991feea2ce2199b253cc1e38afe9e53bce9f5c6e2b5029f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iomodra-forui-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbec60b24dcd462fdee9e9d2c83f059c82916720e2f61a250b1b67bd7cc6f20c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otgnaf-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69307348bb44bdf716badee63f63c90293d3b7f0bb1c0e90f0d3a12c1bf984c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d97bd55330215d36de9fa6ed493008ab5f7ce77fcc30d5557ee77abedd28ee3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8496289c81ce27b027473de349ecdeaf3435aa7c4b264b2752e8beac172f697 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/mikas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd9731ecbf09392f434ca9a57efae9b07bd6704746b58dfbc2987d47e4d585d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-naiman28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee47860caba95978cb2b0118470866c1e25fcf13d853a11d4a7e61fd3334f7d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-frasu-otafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3f753d450877a1b7559cef4480b0b856ded171a5cc297159b0b6fcaa175b50c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74e2db58be6edc7d316f263effa2c1109411b50f494819995fb9912c6a3b65b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98cec76f6651292a9ffc892f06011fc12b5fa459ee8c56a2f99aa48ffbf32dcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-kalma-bicb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c94d26fa3dcc78d1eed79493ae1fdca27536abec18dcacecb7e7c7119bd8f37c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...