MAL-2025-158007 Malicious code in layla-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b0652e1563b227b1822d4fff020992bae859e66422f4975fa3f112b87c9461 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170487 Malicious code in verify-taicu-busauna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 446fadf80e48a9d914d22c063502349d10d0f47124011a42fb9f10b5ecd5bffd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151670 Malicious code in abyikula-nioybnali-lauyubauasukia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64174f2e1d92048c8fb792c3df9e2eb0ccc7082c6de64b3228737c07faa8ee76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153002 Malicious code in avh-afgagafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63bcbeb5eeac2a16e068b0de60de526fe8e3454784143027d41493cf0da8c0da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169285 Malicious code in trevora-cir86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5541255bc73f90fc43cccc57335d2a31f3ff22f796c5d16ba09839492d6051f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168275 Malicious code in tealove-darknest2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f18002fb11db29f447864237226cc39847b3ac9ddffaac14b3ab6317afd4bdfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160514 Malicious code in miracle-dok-uikayananabaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404b180d6e3a2846374a6879c79d849ecb9b6443fcdfaec6668026cc4ea9a663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 371ef0a90df8f8e0484eafed3ab61b66e7b795b06a43c0ed884ac4ec45b2acfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97bafc27ab61c9940d3e44f97aca7647140896a4cb9b3e52d75dbe01010b157c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nacho-bunian-junio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bca23720e68120082b88b6be5607186bb72d6d57ec699bdd32ef16449e951e18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabudaaopa-muyag-bafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9bded51d73714b471fc72545d7eea1b1fb2cfc578baad9464549a9caa90c37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-visa-japa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a12a8653843ae222b505f0c37164edc2379cdccdcf56882d54e7944a7c5c862f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a698deee5247cc4ab592d59d48c23abc4c1d5a4023f714cc001542ef19f51891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehaah-codfd-nutdfara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4c39c6024e3f61382a05a958cf7a24442f2335952b1a1a4efcc2f6ee69e60b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/isog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5831d5d27c6fa2d03857dd3762ff796160fa57a5a41ef550d0280b77643af36d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afogffi-faug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32a5ff89755ce4c28f79db5fc6196aca8a3d1b0c27dc8e66097cbae819606d60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154499 Malicious code in diago-kulp-kabolokgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b634515040c5c90aca4f64f6e88bd4340da9fe05bdfbaf4d17e5547d445dbcab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/kaddlad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1156599d16080c5dd6e9c1cfc75c6ec0824e7c15b2282a7402628e0dc0714e36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-terd-ytua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af667ddd782c19b208bb93fb0ad715ea2ec9a01b29f8c580545976e725e0601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-ai-upuasonio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242974d33d9a6b8e10634db9b520bb059abc531b36bc8efe83b6a48ab4c96731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...