MAL-2025-152093 Malicious code in aji-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b2ab2be9789d244280d90547c5091d50c040b67e0cfa2dbd68818eea746a835 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aiu-idaduasdssuyffan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03a129f4c877fc42bd61bcaa6adb7a58eb730e97b75be86973d02fe9d70146b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54876d48e8ad2f9598bb8366912813dd98b3e46a98822512bc61082307b617c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otoin-agdofgagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43223a24a91bc3bc818495751c66c044a240485133110a3c90963624d253b5c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aiaku-unusiakamu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11f803e9fb62755b0b7349a9a144f853113d1b39ad44e632ba8782d1f21d720a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abyila-ni-luyai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76cf8be4e3dee3aedd2cc1e10be404fd997a4cc32e14b659a9129dc0e5fd1f9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhuyu-tadadai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c023d203c269b040f0598edd0ca54344c42d9021aa2d912f9094fe84e1c6ea2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 733f2a91a8e37820baed117576b26b4fc7f8d3c70fe36e07f2f992c6b3fb0abb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-lniu-kanukakaili (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70c16028a71587dd0bc32828d981fdf5bb23ba2975a55cfcdd37b76471e21967 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35ef325c6d4ccdd21dfad94d9f945b9296eb0c1e8c70ece6c531b351fc2453f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabia-aligma-agiubva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e83bd445c18280ca5cf35af3f29ffee1d256d78b13bde0166987b32033daae52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-otau-umo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d967898c499a56420cef668d5d4ea3d311659b6ccc0b3fe2ae3b20ff64f38ee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f221285c739e0dcfd2193eb1c12d283d94e5db4be3c1393811838d18543c49c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eed2aab7e0d8142bb18f90cd24df8a532c18f0601c626546abe146f3e89651e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namae-nadugsua-mitoskia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a3e86cf1d65093c25e075c0e6457c5889ee7b61aeb9ad8d7130be8ff2b1aafd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in analsia-akifalui-asulaniniu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c238013f9ce803d0c7ca2b14b4286ff319183daf688bef73a2098f06b8715ef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-luniu-kanuaili (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c01c24e8bf05af404ee5b8617f9fff997d51745bf645ec383a1754b01f0cde6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uarfug-mitaui-sufeua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58dc73d7c6e15d636199746f4720cad6570ff55eba0bc94eca9a7db7026ce856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-dibuok-inuinuak1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c60e0beffe07af0f67f0b49804566d0d2780fb5abda0a95df69960f119285eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iba-otan-umaibtu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ead9f1319fd16c6c0b76d51a08ac52ea383a841f7237c6b513dbd6e0cd40fdb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...