MAL-2025-162946 Malicious code in nokire-loklok88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad71fbe7d943cca7f7ef6f152aa6b5b60eb1572026dd2f15353d057b58b28b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164781 Malicious code in rinto-poke126 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee05caeb726c4f1dbddfb36b40eec812ad7a9ed73b33a1362be151185c227ee4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nuati-espanyol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed15b52b9c7a6a67715e0753c1d315fb748833f6bdfd3214fbb4b8d63e9c3a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5938f6165a44455470b2f0b3e287fe2935c73474afb1de277447c8b7674de7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-ud-vamukbaupalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f596e825a9d8a7ea39890b3098f2f4a06710056d572d6b60a39b518536372d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/tx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d358ac40d3f2a81f9ef40f1aea21900fd4670fcc3ccbe6c2a672be3138eb534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-albiko-taovilanaiban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e8b0baf6ee34742d7966fab79c06880b371896e67a06e22a11dfbda9c49a1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a39e62db6a232acfc2756137a11a78de6ded64f135cd450433460d17484beb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke111 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b16a5303eac2f0b6d9a077efae7c1a48ec60b3cd50dc5735d052ee7fc3ac4d84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyifa-tut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd3b32114a41e4c584fac7cd1d40479433e7444d9c1f4ebbb441f1c9ebf0ad96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd56e4246f1638702190d3f129902655a107f56f088b2be75caadd5fe053c1cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/iynujm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cb8dc8d6b589ad60b2489859ebaa21a4f7c7b4f814d2c491fc040b10eb5cf08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45ae25b9bc88f839160f304692f2b06162bb31500c0a9c69c836ceb53247e570 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/tqd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc02cee55f7997e2e271fa79db929ca97fba3c98e38852f2ad6567583f49d09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea962b43524f0de179038c7597dec087561ff7b20781b425a5a49ca84452cce6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotma-anfzi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 645a0d817c0d29e1d758aa3001efd4998a54c6896641d83f9a11d5b87b98e9f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68271b24261b6ab08ee3716d78b0fcf30a51b2461a57a4d4537707d23e85abeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lala-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ca7a7e634fc63fd4bd57658c656a56df86630c29f30e407f45a4d3861d76a03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibopuna-mobile-araoponabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05abdd841e1a12d4d19581d4efb94fe7371e0a19990432970109c6fd9e3d1ef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afi-famauog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a3a4a185afd7906772598e7d305d9fe16994e3660e6eb5e1c6b5c3db3d5d380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...