MAL-2025-170984 Malicious code in bilalnaseem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1dbd57023dc029e98473e9c9053df3d10ef233662677d4bf36a3dda5ad5aaa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed41d2f418ac1c193ef3fc63ef88125b961d55603e8796abc897666b6426e931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kulpo-kaipsno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1382d1ff64f0de994b313763dc5c496ecce220d9cab8589b6334400624c9cb38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lkui-kunammuib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9a9176f8a6c275d3813388035fd3bf0c64ea6ec3b73d7e656a40d10eba6d30d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uafagarug-midefa-fatusut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d8aeaf98de0a59d1b262cca504bbad534034705230dfbf5dabc3907ee63f701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28528fb8796ad9e990a1c3191a89ac0b4025525762289760ca8afe2530457170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/nitroteh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4da8b74def3fd2fbd057f82de8d519ab812495c31709643acb99fa4db6e617a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anaisisulah-paufai-asu9aia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c73ca43685b60fd07ca27c573309e18b8a46eaac7bf15a856928dcdba25431f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f189c483e88996de60d4a028ed3ffccb4ba68b67331cf2cf0c2ebd205ab7661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8779776dfd7e86989a08eabfed8fc334606a422ddc419b565815244f29f19235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymeria-butys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2cf8c95d5a89587c4e460f7a00b2c527f1227e481b35c0ab025bbdcd029566a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa471e5a54a351be2f9471640d90aafeb53d317765227fad51573989f840e342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2cb750211526ef616373b0b84b30bf8de5596243f66ce0d561842b9e2c5ea3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 334d344aac39ff679fc9a3e2d3941cd6051f39b2b8d8fde26e01435c9ed4372b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-naiman30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c12cb666c40dc9fba7c0ddb5967b34cb35526a003b09d5ef60255dac552c33c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54a7aec4895b7b8083429ada0c556c97859a543d53e2431b4ec338a16dfc70c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zenitsu22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1157b4b39a154addb8ae3a1ab19c0cb70223fd67a220ceeac54caeb35e07efb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otmbian-nuyidistad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09558ceac220491644438dbc1438aeae4c30edff19ca114a82bef7c3e0f94c53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musik-daistv-bodot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cbe5fd834d8957074b644433805a1c25aa1b3dcf1569747bd368a936a532396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29f258691d198ba9af4389b6430d08206f07442236cfcecf6a9ef4249fc4d8ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...