MAL-2025-158419 Malicious code in lookingan-nalako11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c118584112b795689f810473c91afd322d500804c8df8521c6a39e008820655a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170577 Malicious code in yuda-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afded46446dfb0efee0e23d16389c869040ee1c346302a8a0526ac11bce6a4b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/dsfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4381b9baae064d94cefbcee82f0a469e8c503eaf8e717de324def090f0fadb6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miloa-nitu-nastu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59a7665fff7024108e8b18326aa807317d29c0a5ccde2a52434ad30aada1e858 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-safifda-nasisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ecd46e29dbc1be5b3895d179877966ee8d3743597464d42858be3d56698b1e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-aruma8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de50be7ec7ca141596250da240833296c6abebd6fde16cc6f162fd58b4ffb786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapai-safoagmaa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03d230100a2a29b11b36eb9014469a795b15dc6f12559a1bcb92696aecbe145f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f46de616e1237d921e37c977dbbd574c7cf65b8a018731e758f3348ee633920e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upilka-luzmu-kinugijani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f630d4bcc10aef7491d780efdd50cf5c0ebc389018370df66ce18d3b38fdb09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22d113a05b24759d06e9f54257bbd5d68706af31669a9972acc4c5a565fd9dfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-ma-safu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b1d14c828319fd7d07418145f409a6d10797c88c5502fc57bfbc34aeaa054dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 694e319e8a412c8e9d1d5092ff380b2f08c76ec009457a4e30f224f687e610da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-luzimu-kinuani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ec2b94c1d58b5b80a699f11e69cfc9a80fc7b61f59b27469ddfa0dff5f0b45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/sdfaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06d0692b2f2a2b309add2be60b1bb475327fe792e5ddaeecb0155af2643a7250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0af3e0669a7f930e270b69f4af0621c8e3e309816b6e512e523c119cb48c80c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namadata-munaroha-mufafnaisfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06f18a588fe50114a026c420b4a46a574d9f9e5504b2efd826c93d9c3d3f4e44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f82b2df05d354bd3688d3af833b6155361eb3dd132d98e806e18f609331f878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-t-safar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bb89ff3618abc09f2fb56016b2f21067a22b06bef05636aaef991dbd863eac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-toaviabpla-madoliobsao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a7351a52dba442298c00e66c665325e79f8f383ea0d9ebb35180f38f3f96802 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musik-dai-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d36c39a063029777138b3ea1d1d2f7b8f40710568da03f9caed681d12fba4f5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...