MAL-2025-166880 Malicious code in teagood-lokika18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc7a4d82214c9df82f6f18bd323d648700c2a9e971affb395c76acc4bbe592f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161400 Malicious code in nabuf-otgigaf-dajaffi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 022d89c220aec8f6e35a0a51fa825a91e61eeb5158db284112b6c9e560c469dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in infi-gfobai-jigga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a16ff404f050987a879a64484fc30e852d65469b1a438ef3736f5873f124aa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igno-jimagifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b13431147c63bcb63ff630968a5f8801813573d856efa4ca8323703b28193c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaa-reborn3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a32672c055e26f78f68d3852e81636d1fd856f557727801718dee0d52035e55c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21820ac562e4f6f339152ea1e4beae1299f2d00004f76b27a2a838182949fc32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 724d3c05c865b5ab3b5d9a8ffa6818b60f8746a4c5993026670a7e372348769c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0a639bf06f6ee23c110d4aa922ce9b727574fe48f1c2e2320944fa61ff84ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fee907f2760be8ed2602baa29dc0d956cdc97a154770a27fda10d7b71212c5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aa6eb530536581a87e4d0245c1668bee322846772b0c3f0c555f6c72e04578f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aiu-unianusiaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 876f7425ac6645e844445cd7d80470697568f4ac793228dae9b24010a9e1c03f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymera-manuyat-pedadaat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1490269c6db451bb05bed8428969e5a8a7b4ee1beb00a014e55f78ec50b45a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 655cdbc943b0947d8f5ca573f7a1da18a74a737f58304f57fe4956012b0b7a6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nokjgau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbc637a59dbab10e8313b97c4dfd72e636fbca53d35c5c8fbfff2e596b342be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b6cb9277a092cc6b05e251fa105772a11be7e37711484a2fffdf2f44277c329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuda-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3985aeb07d5c856f4b740fbdc30263c8dbb0c8e994c7ce84ba358a427b10737 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68aed14ffadd09a342be17ee9bdb0d6af66cb3649f834e9764655154d461ef87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-ukiu-vilkuaubimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2104f6c5b55f913f4d505b3737f510369073c21b16a92ffdc45b58aa125c9bbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in salabunli-nalikabuia-lubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a84a6cf6c911e932535801ef783a6e25f20c40e67800fd79fb657ad29a1fa928 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3cb688b9ffdb438293be11d220719035e2cbc52f2b06e3dc2dd48b8e1982792 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...