MAL-2025-163686 Malicious code in nudalea-fofiri-agomoidouo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fce24998a000f0f7d0eb7a642c16915f68c3aaf6b2bc4c65fc55498668d712e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153928 Malicious code in bufda-muyu-bgagfaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f03cb2dd8f2cdd8dfc9c26fe6bf4b048858e26d293abcc6907da9f026122a9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a88be03e67c6a36ccbceb423bc535c6c799e87c8267d24bda9b58d43c803deb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea3dfe6917f7ad48bfb3b0f21542e6d54ee658678fe96a28194586347f74d2be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuni-niaia-luhubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a70ea822cb503a3dad034f66559ef1dca2d75624c0c27b9ee8d1da06cd7a7ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/iynpug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 836d80b765c53e77811f0014d851eb6441fd08e1737a97d1db08b2f2c83c60eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55bbad6674c7aef241ec0a145f0089dddc778aaf1bc1211e17bc06287436f536 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaaya-sdss-tdesfsrs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ce761364a74a39efcc8d6671f2716e204de6bf5781c3f79bec2b86c397d3156 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in azhar-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96ca057fb4f1f4047c0f50815107a59bfcbfd1e7596bf03aec021475f7db9d4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carv-nutr-sdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f5efb54dffe3e8093211f6623f4e521fa3a1e350723479eef0780fd6b86ad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d81bec3c8572fb79f01e4570bbd7c6070661c71ffa5125ee7c46dad1d777002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-gasd-a9as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7910ebe922445f09d1be8ac7c39cf0c845aea16cb54d06afdd5efa3121a2d0a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78542ffef812e1939aaff4b71f3cff0ae756c821df5bedbb8abea2b7559030f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d2f9c2debd975432a740cc0d3e8fda8b33ce9ae065ad2b6187057ccc50d143 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aiu-unianusiu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b6f161e8689f8b75aea7edc25bf5625692e11d2edbc0e67f05e22f74623bb6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/tdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90ce152a9765e9aa9c42357658ec3607b5b134862bdf66b0c0e65056fe16a5e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-msua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aff54bdd3b9da82d706b47c7402ef2fe2e93186840de93a61ca13c234dc44e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74ba92e1b8504d30a994cedad89223f81b4d92c4d5ff6ebb25d9fde869a2880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 051df76847c08bf2ef35615d57f94a13fe1474baa4c281e664c359917253c0a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madr-vs-munchen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dffee132760cbf57c5ea208e17e605f6c3703ca33d52739e32e3715a2aac67d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...