MAL-2025-152952 Malicious code in astia-alabki-mojkaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c27ca9d24fe0b0aa84aac1147b5e6bf637ee7729d2304c6419ebd47e017412f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kuli-lukakimalaluavuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d2af1d07dbdfc662da559e2c26c138a080b73228db0e5381923918a5870bec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-nutra-nutsyasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e0f54819fbc5ecad3c985a5d696195a02ee157c82ea8e418cf09b6fc2d8528f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 928e65298a9148364b6ecba4be346049250faf454b45acd15d8b17a1dea984cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ayca-ama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4cc8c19fc336ce24ffda2403e0c74c931996bb026e8fc9c0d955269f2d3fce1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89405cbd14c21e28bb2ea1edbd5c0c46c2ac5c36f3fc92568fb09c89d6fa992e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabi-aliga-aihaamava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 552df4886b0af413d8dc813f95893a5f59adcd844d3bf7d4f920c629f8248dc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotaihzmi-kulanisimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9b6af933e71a14c2d1e8954bedbfa72a7e81be99ccbaee0c7a5ac3229aff6c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-namiresan44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d42e93e8193104d6e6c85723b7c20c0e914e4b65581e4db271fba22cd497d993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaa-reborn9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 102f7a5e6e76194861d52f18507731caa87634c00e7897e52274a83d29b76cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2802cffb17d230420090a9e9daab223694cc7ce43f0236403c3281de033d6697 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a30509c490e8f2112b57eca8930e160c2af0ed7ed1a7defbfd88f77785ed2e8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-darknest32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bbddc4aa320c42cfdea199306c086124c52e2dce46d3e8c1de00919d72d8d93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bintang-tea10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3558a38ca8792ac9290ba5c9afccb526035ff969c684bd8df45f811f9d094d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mattu-muoape-butada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ff918874811cbc1f3e83456425eb822ade2e8825c098a0ea3133bc416fd6cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/awsdhae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ed1ed5e586aeff75d3bee121bde6a7a7c5b6eefc49956caca800c77232ea022 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in t-naughty-nubliesp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84e11e66fe284c711eb287567cf0d80a6b5ac9783fbec275c9c641319fe1c19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masan-ofalib-bivabunla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72c7f02eba7fe7e5c4e43e453616800c0270df8d84fa6377b4d45f932543c20d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d545bd43001bfabe86c0d7b51bf0e6f527ab501a500a1b9ea6165d70c65dd7b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namadata-munaroha-manukangifad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5207b7026d2d18062a8cc0dfa94487ab2f46dfa9f955ce798fdf70ea4e31dc07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...