MAL-2025-162587 Malicious code in nokire-genji93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c58d3d9db2d956fbb34dc1e09603e2728901a84b73c2cf6fd11d4f56eb55b2d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd240b3ca9f653f3f8bea59211fddeb5b889b7d326d9af500fe1808d2513ca54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-okta4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 465b551620d6dc98abadfd888b5ecaee25c73fc1163a41dc0c88cfa3efe0472c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabia-aliguamafi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9be22d19b71d3644ba5751fb6a8ff63297c81528be4c805c35d59df56087e38e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db8dc155ce0d92e67c8ad00dc7d2d869fe3ae27671973a7abe7ee6651f4a4798 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aad6b3e6c3ed3a136aaccc5b23cff89b8cdf3af07831e75c5639e045a53f5afc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b10771ffe7b8868173ab796ae0f3e7e31843a72787093c30ab089c72d10c00a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciaiu-idat-doauuufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a04fd8ceb07f68905b6b564ead35751f4ec780f05289a5c5340725230257445d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lis-dinu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e15d051d1ff784373f420c4e475a23398d932a3b09ab0984d9bb3a1b84b22202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uarug-miuafi-suatfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddb01e3052e42a7722fa4acb41ab401e3066b0db079bd3bb8b9e81e3d18438b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in matane-co-nurses (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09d6a9164fe6db67415759f5837d923911cd8cf5aafbece186d06511d9fafe0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daeaca892a34e89c3311fa25dab91079a773d0e0407f52e4787b61ff1654ddcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e76b3a720c5de44a1625d716f762d9bfe5b4a7ba3c67c4da2b076438137b96ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scaaisor-dr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d512021391bb808afd4364394fb745cbf6f6333b4f8bc64eeed591c3b0992b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f99ce5d09452810f585809b0bd758b83bd1d2601fde4b2cb997e4d7807102836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-nofity-goniefga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector add717999e49c8b755a3bc21155798378aae0bf256caeb942c9abe4775e1bab4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-alin-itubauiail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59416d214b4ee573c7452d0e135c71c4ef9a327918990d25c89625d2d17fccc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotumafa-anmfozai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8049813a94f12c1c10b83f4e4531349a69963a36cfbcd0bbb1741673a90d2a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a458285b5130cca7c56044df1b222361e286e8aa6a29476d004f39c6b30fad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scaisor-ddfr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 227f852129861f08d1921e3ff4450988ad6815604a3f004dee0a34a25e124824 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...