MAL-2025-158051 Malicious code in layla-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f247f0c81323421a23fcb023d96a9763b1ce0db9fc7246158368368fdaf88c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a8b90751cc4f6a0cc8cd64453b44c525b2771debaf3c767dcafc131e5728d3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tactiva-b (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b18dd10afe38eeee503688d156fc5b44122c9e0f58bd246e9bb44658d75f6633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ucok-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31b3766437af44b12106e28865c3432b0c4456a1594360d3037f3f0e7bdd7cb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7ceedce2b51dd23f28b005a7465762979944892a76b460e11b7bf1e4b3c0ed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juris-zs-dgrs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6dbd21607e25b7440f36f7b5e32f51541689b0061916ca592c340cc69d8031a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dd7d7c125081e1eb81714aad6d049d14fb0e57918eb5205aa3dcc78ae9abd7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d8b8463d1e62de5b5aa515ad42550397b74b15d8843509d93174aff9b132141 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ticul-biua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 656151952a5426123f1a554585cf5d30ab963f712c3ab0eea3a32fa6d6452c33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-luiu-kanuaniniu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d926d522b6ad296e73298351bd72d62f44aa041169b0fbb7d5bca3f1824980df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tear-grsdas-rc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d08680c63d6dd5037040ea8bfce9dec930dda5ff1f067d7d7751a7ac7de95cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7446c31e130e8c69c1bb9763d03c662d5ea4bb769ba39db4e38b3988a6e142a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3db1421e3fe60f3a0408f3d7439dd84d2cd2cabf7bf86684f89e1b822a14f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 839cb40d8677d01fb5ff434f213aa86d78d69f676b4106b8de8171e8945fab8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-poke56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c30f9c2e2ab4091804e0fc64323dfdf197ae006a7a736d432a9419bb728764a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotimi-kill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f53e686e98df20cae55cc524381d3df69cc7e382ee1ef06dc492808b1474660e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-ga-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50acb305dfab9c06b1c73f9276dc71065e28a0577959de3cee68ada609cde45e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siregar-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89e4002c7cba14a46eb049071605169f76b410060aa2f003474a7f3f61a7da65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c98b8ce346ea83c9593056bd79470b59384484fa34a67e3b2ec5a93f9d88de0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-toafgvila-madasazhfio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118933b613d5194a2513fbeb2d8f9a522e84c67821e1933ae172624a285b4300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...