MAL-2025-169587 Malicious code in uarfug-miu-suatfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40491f41b88e2fc211ad74de54f84795401a0f854f154b070984d015b25d64f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157346 Malicious code in kamasada-nutai-kad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76bfe7c40d94a13481474283f93073ff0a86af2f2ebf78631a44fb09088bde02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kore6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96e5163be3c431d6b19c5b3e335cc58e8305bd96e9c39d67f2e88ee35a9a97ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedarnan-nuat-nuts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c68e791a8825a033eb75547999427cab1cee6daacc970e406391a9981043fbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a94c5e2a250c2fa9e1a9dae02e134da4ebab42dca389acea190b9db0a68385f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 256bc42ae12b4b65e0daaaf20c78bedc9fa3e40eadf31ed86df20e08ce903404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapafovgiaanggapfao-safa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20667d2f5e0efd514d3285d4ce86b985bd703b5c5c38cf474c40ae6a595227ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d351bec969408aeb9ad7239c562832e44b336c9f60639dabe5a959d768eefda7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d750df52f271f91c9b5351d13a2eacd0734088ba9b154b20d88bb0618e751b84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muda-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb846ba3be78e9278978e375368f89bd612ebcf9703f3c89fa068dd9eaa777bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kulpo-kaipasino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ef0dbf16ceb076c5081068a0e72b7a56dd444e4f97442637659d687f9af5c80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lubki-nasimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a2e6e006eb2936c99be1d2d30bf75911a11870ab694ba34586af8bd33e8330f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caf7ca519d322d36ba0c219e0b798c07d3e65aa1ef236fee25389dabdbbe5ced This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1778ee3a3c45c053e1492c5aace52aa3a7a39734934b07023304bad94bc1b721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ec76225cec8f0a8f466b35fb7f50b61e29a3697437bfe55b872d4fd4a3fefd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nice33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2618d0ba55e6f967fbb6a6f9423f1cba7110f9652dbaca4365b64f4825c900b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akanabi-aligh-aihmuava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae3c9b9b2015d4424beb0b3bff85a2ff9aa5d93885ff4c8c14eb5bea12b0fad7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1811b5ecb838f2db8e017ca5a29c70178cdd18bde0a683bc526409b52a45c72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mans-manapa-nyuraid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e68f8b354e5651a6354f48d00f15d72303ec45822f10f26e659079ea9bf7ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/qwadeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ef24b8844f2fe345ef727267a4647cc16a915c36b7ab725f7fb6b373fd6ac26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...