MAL-2025-156834 Malicious code in iqbal-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6502b4511a3821a27988635831a97f1bfb9fab8bea5f3ddd294377b75dc86bd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manttu-nuyatassdfi-muadfiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ce0e954ddda61a75619e42f6362a5499842c7f8bb20460405b712bcf12f82c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4aae805180cbe28341f6cf24d16ef88f09e5a404725f9bcadd3417401e21ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cbf05c5cfad396a8ab230f6587b63401fd21821cc0c5b5208add0f5ba394f5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami135 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89e8368f4b68620ca1dc198b9a38efe40eef714c6efc0f5fe7942e53e85a943e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abang-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2d516c299fa01c19c37df0ec79057567daeb2058785a7f51be65ac440c707b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df9cc14734dae5d74223bed65688ef160c961ba1608a3a1c68e6ae3edab2d878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-ung-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e981aae59afc721542c160f5b115b7d2b8bfeb43bc7ac2945dbc60c16e292fe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/iris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa9c22ff81e77e698805918dd5f2721f4e72b1161a228174829625792c581eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3436241247c7073b0f2d2948a6f09ae1f7e494856c92bd73d708a564e6fc925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ba7e61a176cce6460e06d1bf61684af513d477efec8687096c1327f529ec1c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c056f9b389bea19357a05555dfe42d2d717066f022f7e8932b2933c4c582ffff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 676c04d8ebb55cd7e512aae6cebec00a2a216a45a74b14b394401af2ea02d092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c04b6c349178ff544debcadd9b0286062d41fa614e59e4e49bc7c4d4ca722118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c049b26c6cfe18cc64aaa8da7bdd8153f8e0c5f6c08aaa44ba2f7ecff3cd5b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b80e85a42fa52629730bcdfa4537a368ed5d950f02312cd8fd149d63bf312f5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa8d5a2b46272c9b37f7bb1ae39bdc67c9cdc0bce7869e12d7475598c1c93043 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aviah-afisgiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 262a5d13c2390cef357f6a09cd7f08890220affac91989edf18c8fc1742c6730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afais-fodmafaghog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be760e21720f01a36b5e12f89c86c5c7ffde31c48e45ef76766ed9f38b253f29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-amoavugi-aninahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09b6299c2494125fd053a4f54ae9831ac7b049406808c8fc4dbe682be4711f02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...