MAL-2025-162435 Malicious code in nokire-arjuna24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc9b4a6e3f86acc20e09e303ff5e11f1bc2a4de58b4607625e38719b0db50208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165843 Malicious code in shilang-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b5a88a09f34d02aa29329c01acc07f6b4b0d659fc2bd65b0d3d89fc52303485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ivao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db2e85b819c0d638abb621dbaa4127018b4a6980d88fbd2d3698aefb99b125e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagis-fi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baae2b0accb9e0d2f276afd890196736bd01066bf47332eb4977afe2822fbb7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7545863afc09ae95bc7d6dd019c92ba0702de08d954f2196858da341b5034672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiuna-mobile-amamiua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269aea9d9a6a7729878fe037daa5287f18f37a03f8b7da4f9e52184f5cfafa14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 733858fe9406bcf43126c5eb872456b9a95152184300be9de4ead29d09c8341c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-okta38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 079e21abc43004e78566b65cda2f61b37c054b460c488ea09e1906d08ac4bfb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilava-dakadre-nffamhaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77952073099765a21065e5187fa99418b81568f74c2eae0e7f56e64af784618b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbe2e280adaeb7bbf500ba134027686869643fb2f89228b39880ef1c16ef2343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nakomi41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9b1be2fdec9778b727c8db543f9edc176107998fc23fc5c0c2b2c8fe0c13e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef188f6949eb4339a26ade8240a6ed3d33b183b8e4d4b02e724a5a3d7bbeb044 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-dddssf-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f615399e9275068bf31d8c416c295c67dd936bd6e9d3f811bf320ee5cf6849d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auyia-iaydut-daina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e90d23f5bbbf7df834aa109a4660c5d2bde19e821253cc869e49d3f62437ef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-mudiufafa-sayugauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5134595c0902d1dd80c9a5b44ef225ed464d2e051c68de1091302f3642a0f89e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc805477c2e1712991f3cc6659b859cd570b4b9205b2348649dc60f5abaa8e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-naiman36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e93d81901c292cbcec78843ad8b166aba2e70458d547ce496ebc6fcc3757f16d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eb1f0ffee8d9b983b519e40924006df30276e49838a1d36ced54d9d1a6787f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-gsd-a4s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05cadf76bc68ba216d00a0639d8e62626230a057acad5c46b18fcac0f2c3e33d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-butya-tsyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23078361a574ef3de85cc256a2ebd13f184a8512a0c7d8a734b284b4612543ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...