MAL-2025-153560 Malicious code in avomainah-frauasu-oau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1b6cdb989e3be41dbb456843b8fef5f5a101e692ee18b01088438f82cd0a4d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lot-bisayuam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11da4680596b327b1aac724f0ce099391a7950b459fb2fb4d5f9d57472a55684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lala-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9aedb046e33cb9d9f8fd1231e6ee16fc293364515a90fe91b5d4520fa9920f61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-afiat-usuafar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7faf5940b6c1f76704ead64143180086c73b8541ee470eddd76cecfa1c8c29c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0304c88037b9eebba6d15f811d3bd70ce23923f3c51e08ca5114801a5e5737d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-saama-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eecf14861bd81567ca4920d90ebd666dd68193b8828c509c82b9a53ce66da2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1b3cd55de4080be2e4f6e2ebde70332f5a4b78e04925d8e91edc50824daa90a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arhani24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bb2b6cb4684d5d96a1ec2b4a36714d90a705f0790ded54f335a4e9046405831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-fragoias-ofatu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c061d5d60c9db85bb74505c88b2e14a8abf325e7fdc0f45a23cfb8612812b7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-pok10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 749a69aa245e63f23234306119159c19d1670195d24fb451225d23adcfe5c16f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8ee309278bece88585e33a1185b367f1a51e9aea31c46d1d65343cb7f3e4dde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uarfug-miu-suf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1daee1354e93f93cabea11a385950fceab8155d4d06d2327326d54bbb3dd522a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d92bb16e3e5bbdcb93f4d3c7ea39170c2610401253d6b90af3fa273d170fb925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3df03b3decddc11f945041132f9d10afda7379fdaa99cb2dec79ee6c65ab896c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4272c0a09b03acc3da0c173bbe1443c73246e9f73d8f3467c8c9bd1571470a47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabi-aliga-aihaamava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 552df4886b0af413d8dc813f95893a5f59adcd844d3bf7d4f920c629f8248dc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d46f2b99dfc1e1c960e0d281a8f54738840c3be27651ae7ff305cacf579b2774 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke118 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09383fcb5e5dc7d3ae312bb84a878e22f71e6d2465314b26d479d407e1506b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b0064f8697d5bace52a13f37c9ab6ddab55ba1c65adc5f15ef63de4dbc5d5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhuyu-tadiaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccbde7ce07682289f17b19a4c10cc8c82927723b5cd3e0e1fe51861628f21a25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...