MAL-2025-161247 Malicious code in nabila-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be52ede3d087891bb6641f84abdaa3d602a79c1c35aff2082791f6b61fb527c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sau-ai-ups012uszzgxgfiek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00b3103405601d645b3aa2265fd5798adb5618df544f159d08d79ad1c1eab4cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igimamafo-jagaigg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 015a9381d655edb0da9f07e4aa932db8acb9450935f7f51fb817f4ee88586acc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff47782737529fb909978601b27a04a5acecdf733a31fd7a689b8fcd1877a118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-diak-vamikuam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e79b35de673c3c6639b675b40f8ddfd9d272c4d1bf82e3d7fdc61ebd98aaf38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otoiman-igamaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d0995edeb321f22a7399fbd83b917ebffc8d6e2f543b304b9f514e20ceb6e4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eab4db2748be6278c781c74edb31e27fc1e66066490bf1d03237c04c678003dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gobali-jani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32b18fb5c74b702e04bc5ac1f1efb958c40419ddcecb4c4f386adb17fe91ff02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manaf-marzuki-maj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae8d8bf32c42e58077d59ec4a9b17c88171ce41fa0fc4e96cbad08a9dd41184f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/xsffhgffvd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49cf65279c9f1a9ed46e22da9a36191daba16a01a4245fe8bee4d56bb41704df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyua-idugaat-daa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86eb0ddc22d9c5967e9c04ab458dff532c587cbf3d8c1f38a44bf40540963cc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0cd84468f2620925babed131f262ba52f1759faf0c35fe330b78dd3386677ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in matane-rasaa-nurses (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 361ef8b2372671a953a0af13f0a45673d0ee85c5a37e63d7852f81e8426ecd57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fee907f2760be8ed2602baa29dc0d956cdc97a154770a27fda10d7b71212c5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aa6eb530536581a87e4d0245c1668bee322846772b0c3f0c555f6c72e04578f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ivdkk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a94a5148425ff410159d59b15ff1cb324b50a6998f7fca0e6b7cecae2cdefc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namase-sa-baukmwmek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cb239d05ae1d6b41f3f674fe71d516ae5e94d27032019517571a4e880b9b4e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madrid-ucl-vi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66c12451b7a1254126e905552b310f8b02018610133f51e9139f9116cd1115d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-avugi-aninahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24292499832da98949bc4327080f903b766b8f921d618e808605367d2019b561 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyafru-tufdt-darautut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d63916710420697fbc0d5508eed5541a3e8f17979de30d3ab4429899257971b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...