MAL-2025-166815 Malicious code in teagood-cuekin49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0d8204bebb8e6245819059ae7a4903aa209d334240d492a83aff9fac502ebb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/isafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6294ee378c5ac6737b27adc786c96eee83eac7a52aaa21bd0d996854d478e12e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-safifda-naisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 012cc6e252390deec94c167ce6ee68829ad7a8c9d52b556771b98c5239e760ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-ma-saf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 579c27bbb9a17666aa47f02e9875762fc1e0ed3f2c7acbf262662573bc2ad220 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcf3716569ae0d9383aa94ed0582b292cfbc81794541de739af89ba0225804ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1b6519c8b82b42554e613d62fdcebc936a374bac10f08d5b4b81f79d1d72bc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutaus-manis-nubli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6d3393d59ae243915f3b2820f2db6f1dd105356d7720c7dc7b06f575f48f07c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muyafig-budaffu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29dccd0c1b791a08aace841e9361d2990ad57a57b855c5f39d30c1fb33469f73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4635939550cf4bf7beb47abc53f7648128ced7c18ac481ccb63643a979bf5502 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kuli-luviaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1edfe459cc968f4f92dd6248fb5f0a60b334e169988e25db7e5365da1cef90db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-manst-munrioa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fec82cf3fd9ba65f5d4931951acdb6c981037d903d439ce8f9189302045ec7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 958188a2190a9c1da2e6335c6346e56765cb7a6277dc16f6e22974fe18a98083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke523 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbebfdb842fdb2055362786d4136e41c1a1386b489d2d3f4d04ce77aec5f2fc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6543636f229f4e8f325816f2d3ca64aa191d08dac12d32e662454bb940f7c614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/yissdas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a7c005b60f98601198529e4b6afd05193b043c228b93755e6235653e9b5d446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1545889d68c491c35aeec4c5c105978129f8b26f18e8a187725b2c3eb249009f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ibanuni-ota-uf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f6d859ee859bcfcdf4eb0f88582aff53014060248c5eb964579c25f9ff207b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98519036302126231cfa9ca95cee8396c7a2e2431bd5a9fb26bf62224f54bf4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namae-nadua-maavw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4f8f2bbe900037de95c5f7d01fb908d912abafff91cbb5bd98072240f18bef8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54d576a1dbbb22dafe5c0e49c04c23b8501601cbe52d7611a897bf1fc931b420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...