MAL-2025-168925 Malicious code in tehaah-codf-braew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d885eab27563eb02ba901ed41e76aa2ae24a4daebefa71588466b43ccfd6669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nuati-espanyol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed15b52b9c7a6a67715e0753c1d315fb748833f6bdfd3214fbb4b8d63e9c3a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-albiko-taovilanaiban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e8b0baf6ee34742d7966fab79c06880b371896e67a06e22a11dfbda9c49a1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibopuna-mobile-araoponabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05abdd841e1a12d4d19581d4efb94fe7371e0a19990432970109c6fd9e3d1ef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotma-anfzi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 645a0d817c0d29e1d758aa3001efd4998a54c6896641d83f9a11d5b87b98e9f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a39e62db6a232acfc2756137a11a78de6ded64f135cd450433460d17484beb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2880460aa2f09af6e9b591abbc48b933f496c0151d7dc3b7a021725a56c8d091 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scisor-rda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e303abaaf8be4731626a7637b7c76ec1e0b1fed9dc6d295b084cd0b89ec29d4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nustar-miuyu-nutyuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a45f89d2e25a2ff074fc853720e02afe45ff56166c0503699802e17512740bda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b228a231ade3f2349cf4184ac4731ba418565168aae99dbd414460d1bb21355a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45ae25b9bc88f839160f304692f2b06162bb31500c0a9c69c836ceb53247e570 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-vutsa-butsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bf889f317b63120f201d9531ca58d466e32736f2a63bf5c6c9902ad168e16d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2132dba51aa3d0839a3eed62d2c2e93bcd2c57fab847e0cf917624415ca53e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd56e4246f1638702190d3f129902655a107f56f088b2be75caadd5fe053c1cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-uylud-vamuiuknauin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c4cff555665d0e9c2de9ed277ef0e4de2007ecb2435dab6061c3d20627cf21c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afi-famauog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a3a4a185afd7906772598e7d305d9fe16994e3660e6eb5e1c6b5c3db3d5d380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bd03c4dbe48ee3b5debf52480047ac9b9c05db847619649f8f1c15108bc9b7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/tx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d358ac40d3f2a81f9ef40f1aea21900fd4670fcc3ccbe6c2a672be3138eb534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lala-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ca7a7e634fc63fd4bd57658c656a56df86630c29f30e407f45a4d3861d76a03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fasak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 433e94799b1c6b5dbdba37dd75ab9cf202fa6b10b2d29e34485df876ecd36962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...