MAL-2025-166735 Malicious code in teaa-reborn38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2758aba44f676a165a9fc041a44db6156fe7866f16c137555a9cf2a22ca7a75d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165516 Malicious code in sabudaaopa-muyafafig-bafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0db8351251fd159b921adad86d67bdca7e09c16be93e2567d7b276d651a40ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in samehadaku-tuzss-sur7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2049849e714cb872c2646d8a414b7611ec8124d3ad4b9fa1b23e07cbe1b560b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e902a78478189b2c86ab5d4771c69807393938cb0e9cfd814da89336556ea941 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 468fd8acafa14b04f2cdb294e2ee1501aa3c1c4fef04d3c31f429159beaa5b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff110dd4db33e13abe2b171700aa6ab1c6590f1541a1150debff1fe38913a664 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-safifda-nasidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b97bfb93945e28a6a1953bd098cf9328dcbec6b81d391c430ad10c3e5ebf604 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daff58b3b51a1536c6204ba25769db67e8678e721795eb68fceda36ce4f5b8e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba67736a6cad224cd8ddebfa68b18b0fed63eb1f8bdece93b6b163fe08b63ce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0777f156eb79b8ffa1eaccd4dbdfd83077430c81a130e7a0c5acf6e5a148065b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ertacssau-vs-munchen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66fa872796c351cfa6f3ac0f8e1f3ac4f08141ad4e6d32f4e0f943a30d2fc2d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b6865b2a63696e95762bf9c786319a43ff86031520a5e69dd73b9d60f9413f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uarg-mthai-suftiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2d989813d1f5f08524c902513c3a30d6ce68ec67ca16ef5ce16dae215b40aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abeh-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76558d63b5260f87c983c22e898b60e7ad327d5ccd11c631d14eb92dacab8900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manaf-yuki-manusua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24d5b8249276827d9956620f96cca2d7f95d5c5de7dbfb10f180a838aef055c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfba69bae657a49329c55cd2adbc568c411bf703f7ee5b32346a55c8eccfa5bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce02fdc20886b38a4bfdda6b569852a813869100a6a868f3fb1fdadc667f65b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-dok-ujauik1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac5d150ecaabd2149f6b3e1e6a38088db22f1fd840b824e9f28cb97a4b504c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke128 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5821df3cbc484f496c6b4e3c797d3c8c9fdbbf00c315cf5f4209320bbc9d54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7dcda1ee45882e6932067816f6819e670fa1c438fb8bd42f167da17eff704ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...