MAL-2025-170632 Malicious code in abdullahqadir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 859834d5b1175b0afc7428815f8dcf0e547a28cb7676ee7dbbce6e4f440284f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/tadx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81028ba5d18a96f4520a7caa5ef4b2f2135bcaec90020859ee6e2acf28ff59ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upiila-lukzli-ilazou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bddfb2dbcebf92d72de16f95cd22934f1a90c117288873e860fc8df995363f51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 824d99b828ae275d75ea74acde2a97f34c6966c205cec9279f0ef591ad5abdec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8e49301af45a1ca4718b2032683688e969e7f4eec4653b5abfa847036dbbc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-dana32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b880f64ac3a0fc6f52ad59e9535f724ce67c13d99f7b2ce83b6ea8c8e82dbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ksofad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 831028648104e2ba1ed802f61966c716d99556ed13dacd08c71535dbc395e999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutrasd-nutyui-mutriao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3047c72872dc301833d5a0db7c752459402abb625392cbf4300c29aac728aea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciaiaggu-idatqt-fafugofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a34fa15162c58e48bec781281b2c78e9426b2238b097de6fbf0019d8b1fd53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-dibok-ikalku1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac697aab7c49567dc8ec8b29a3298a1d1d9504728ed54631621a6e87b50dd45b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43a7656844e71cbb0117291d942d529dfce370ce73d2f46f198386aebeec4413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3344de29088a7882ee60805f6ef25d69269ffc07555fd65c4aed04da03ca9047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ticul-biuyaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 988eb6ad7547010b0b23fdccaa7efea28fd9ae78e07e3dbb97557fdfb8532199 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyifua-tut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4ac35230685a4d80718df9e5e98561e495146d51c11c24344c41fce31c2cc6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagias-figaofmka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab37bd5918d0d733d135223f07e58813d23175bc3801fb1594f2e94cd7a14791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f93478ffdd5fd8ff790df43556190f9af8b072197d974a2ad70ccebaec4b2891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eabb453b72ffa96d3b7dde58862cd957d279424149c57dcda5fef31d7bb7d7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bufpani-mau-nmafafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df8acd7280a499bfdeaab658d456d94962bc84d5bbc35d0b78ba27fab1ba1a99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dfd32bd52e25059b11e46fef010ae60ffce4c587f9f89e48ea159b6dc4013db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157533 Malicious code in kentung-51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d153037546b444731f53296b9dfe7a57278749d65906ed5d7b40f76d6b8c326a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...