MAL-2025-157352 Malicious code in kamasada-nutai-kd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8a9cc780f64e03433c4b76c2dec895fa4aa43080ffefa1bca9f1b2715006a1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150894 Malicious code in @miptaa02/ralsadzy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c5eb4eb3efbee5b3d679dfb557a941890a176a346257a20eaf07c531715fc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ba7e61a176cce6460e06d1bf61684af513d477efec8687096c1327f529ec1c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c056f9b389bea19357a05555dfe42d2d717066f022f7e8932b2933c4c582ffff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaa4ebb6a2b96c8737a3c23ebcc0deb06ed46961d45cbc3df25304999aae93d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c04b6c349178ff544debcadd9b0286062d41fa614e59e4e49bc7c4d4ca722118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kulp-kaboloki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10081f12a3739b7ef59fea47217f68dc3469266d228809c6d7847bb0f1bb9d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-molpe-asiuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5597c79706b9d81e746c698885e767f68efa21ceef8582566945b9338555bb26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a15c61c0844475e18280f28fed55d1846c68438b9af7c0856aaa3bc0e153ae75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lisa-ama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eca80f9168330ab863a4f1534479ca6625a48e05a7e14fdfe981e3345c65f19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angin-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26ea496485bae15508e0d8dd27463105bdcc1cdd854c015239de98e5c1def458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afais-fog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55d9de79e0fc0090eedad15e4ab6a4d6d8c03966fe2d9a8ce7d7202928291e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/pgfsa1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85f13f098e3ef3970f70a2ac6c446de999a0a2d5112b06460424e7cbdc2a9d61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-alabki-malolosiskaiafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e69d23f1668caaa8f86d1859b3bc70acd1717a0c8b41c00a190ea39c373fb4f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 703c0fa54188cd4807c579a22334e85f9613ed1bc8227fee8cd5b783d0b4f984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ccb30bc28658351b12360076de0bb02b9a4bde78035b70560bd66ce171f6e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abang-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a84a02c15318d4139fb1f3670c2eca464d0ce3816ac123021d11226ca2b0ec89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lumi-kil71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0671e050f96b992d01eb3c772bacd81105dfcc596f2584d0e2db4da80fc61551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62853f31b420d796ca44cfdddc0da9aa2749fca310ac2a3b57575d0f73085ade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3595b082d2f5f1a3e02cb67e18fcc4994dbbb8290e73adc4281786d07d3ec769 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...