MAL-2025-156095 Malicious code in ilal-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26cd6543a1f33a5383b893d056b7cefdee956d61e94a9e6dfed421c29459b0c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37545e99cf1c7e88ad6a1ad7671d516ee52c1874ab3ac55f66d01c9bdf152f20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nutsai-asaffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 729f18d78cef3d5c49d6ddcaa27cfebd9a0a2126a4a67bf203cad4499668d261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a7d5b217fb5b37c3a804577bcb1bb221dd0cca5031820007b186bb1f8fe6e7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 179c3ee70fef5fd9705797b1cac2c00821db0c28661ceb980f70cf398619b0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cf76f383dbf12b97128828eda355160a8b7e17c0723ca967d4ef15903f2fe64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df8d9b8e75bafc458c31bf88ad967352fa6370c82cc3023ff9bfce40a157059b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mattu-nagyaa-nuaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8652ed08cbbc5077cc2880ce701f649917a1cc23bb0a40a8866d743412cc510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f79920f17e17991b4378fc2230bc9cf83ce72833566355b1b3610fce86620fec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1faaf3bda164e71caee3e0809d6eecdd238ecfc1bc2c62acea2607824d134377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b02e0638dadd44ef9ea9de01bd3b45cc9fcc7238c820714bd792ec7e39e60415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4223b13bc0b9aa10927700bcd1625976355c003799cb0ddf5ab94a778baed749 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ramadan-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53a38c363ff5a52aa2efd59ce1b3ea7463cfb8a1e6a4729acdcb04fa1dba4ac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abyia-nik-luyai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a969ef669c340c0de9be45a7bafa39c0a14fc93a72937ef952b9b92f7860ba8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mans-matdu-huma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7395e3ada2490f33daf21065bb4004843b01a5556769aa385f781ad024fa1cd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abi-alafi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e1c88021a3bf3edaaf6ba36944c1d4d2b9c90288fcf5501b58c58cb087acbd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3d59f782ab14989aaee70585f256d0af25147af6bcf126ffce592179a5eccf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/p51r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c85876034d6a36860db50a097c9e669e4fca4a75bd2a3983e892c6149a9914a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-agaofkafsf-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8abbfa987456f57c8c87facc77fc6b51fbcede5fde071a5542a25006f88def71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-nofty-m (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f69ac53e8de7d02254990506c88bf6c12024e5a5e5ea17c71887771d5da5d842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...