MAL-2025-165010 Malicious code in rival-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b1e4cfd0174d5252cf79fec5061077b2d20c7a117cde59de86de734a86238a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6be57b1fe9eff229d23f0716fd00dca397bca4d38e39b4911663eca0b7ee810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e185bcb2b42832ff146c44745731f7c0d830e2e444d5a32113cc5f2438e5bff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2a83618eb5b9bd4388f93cfdd61cb370f752b7cecc269858c06298c9156d04c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kamuli-lukakimaluavuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae55d9069c2165801b3df1ed692360a77414eba3ca13ccf69b7b7f2adeba6e22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modira-fuhopia-janaduraoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6e3fd778e77a75c1a18c191a7cda0f770a250e8ebb9887cbf50f77cb87d8f25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fisdnissh-sf-maegwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff6e3bd084e017ceea4889a8a011b1852026176e45d61aa23e873c644b1938be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-nutra-dfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f65507dde608e7d3a41cf39581570ed9e5b79a1159f5c024089b26b81dc55ce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyaudtu-tauut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 206225f292849743133a34d305b23bc87f87a77d7b7fc5e2c2a37875b9232251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namae-nadugsua-mitos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8780db6746f8b2390fc765692fb2ad001e31ca03a6fe5def7c6c607faccbe1f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 955eb7358dfc6ddee348aaac1f6e28f40c5fe85080a9b4e4972c39f995d41697 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-al12f-dareaghaso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b58482f979a692bd51310ea467248cb3f3bfd5b36e8016290c00ad14eba324e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97a210e9f72e30b6ef1f46981e5628e6986f555b3e643768cb3412b63c054a6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otoin-aggagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1896ab76d242eb24b8357c4a5faecbd87d425fb4a94b819f768436cb7647e1ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34301443f937e5258814341a066b41cff635ac64defbf622aa253d0acd51a649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/relsazy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 896f25c183ecf3742cae4986da7bd180e37bf4b3c826df1a59fd52d0c6822125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fini-savion-transfor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee05a9ad01869ba3cc76576534440ce6938be87773769fd946b048d4ba099551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sfda-muradaiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d2b6b9d9fd273040100f70f5ef4c6715bdf2c6464b5ff9f2be66b53a2a34665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/dxds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fadc474dc80ebe47ed2d91a6e5d99fc55a7c7e90c56b74c798dcfa373dc4755 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lala-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6f51043a409db5493d3da7924d41812023b719c72c7f4775e667a55c13e15de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...