MAL-2025-154880 Malicious code in fadila-poke145 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49bf126af0c54a6b3b3261c300180ef1055cb22095357cd75d730382471ab345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153022 Malicious code in aviah-afi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfd9f74682fb94523c4633a378fbf2f4111244ce8de0906bca44ba776325dff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c711b5850a2877543da0a94e16a7d877fbe85e5488030786a92cead954d41b54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/s-codszire-1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector effc66dce6361e1f6eceed2a9ed9f2d7f9f4b746f58d9a157e7085d7aaeed3b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-amogoi-anuhi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79906d58c2401e4cc7afc38f8139c8291b2433f4cc52a81212b37dc48e8ef4d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-visa-koreasela (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a6ab02e640108ccff5d2cc336972b09e2bdb824ce95f8dd152da086f6bed8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aiaku-umuaialaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0416e9660b4ade02b9ccc3411c4e73462ed73b1d316ec1c76d857d35eb93ffb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manaf-manta-nurtasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304ca8e1df37a438f177600cdb79ad827757e13146019fbf3ebbdc5dcdf93fe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d8ff8944d0654ccb9aa2d37cc0fcc4330b1fbecad874fe7254950b7ca93fab0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64de01da0008f891850731672df906c328ded56c3967494eac214eecaf287c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2de821e88d51f1136ad42184459e6b65109dd74bed04d6668ed80ddf21468a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-ud-vakanain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4dfc6e40f7ff8c87b4aa127dfd6e79e1e43978d12fd19dccdee0ce7519d63e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotaizmi-kulaibknisimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 660a237c158465ca73bcc88cff8286adc56013d0cb893a59c74627bbc9bf5f9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c72b4c55653d75c7a501efb5de31e41baed2598fdbee9322ab46f396cb0b00a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in matane-coo-nurses (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c58a2068d127d5a68a79774c5574204058cacd52ccb0e687079f64a4159764f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a59d913ef11504b02302e91319edf9bedbaccc9794ea294d42430d304cce2f52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-aiuga-uyokai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f6cc3c974a978c6a853b16a0cd6915a605bf3ca2929ca60a0f75ed8a12f7281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manila-ala-maoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e519c1fcdf423c34192404426fbfec86da7bbdfcad21989db85d727bcf56c7e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cfcfba778660716a6c5c877532ce4746c04e4c2460e4409070d39bd7e87ee90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8e49301af45a1ca4718b2032683688e969e7f4eec4653b5abfa847036dbbc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...