MAL-2025-158078 Malicious code in layla-poke89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41da46082f5805d04c6e714f63158627c48d3f21e135feb960c0a28997f3e840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155088 Malicious code in finis-savion-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6ddb8f51db08d9f479588e0b7f0688a0b9e0f8a3d64fbe4910f2b286cdd33bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagnias-ifiafgag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caed87dc4282d3c3ac978ef0afcd4fb75d263a2364da2eb7c1b0573ac4c8bd3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d23e9ab0a91b585262833113ce9626c42e5818c0a589a89077cfabeddbedd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibona-mobiule-aruanainio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2af6bdd37fc597ef623b8c85c692a43516b37800cd66219cfaee3cb62a97e9b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91c5471dd734bf06f7a2211dded5eaebd22fa057bd457783af158416f147bacf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167993 Malicious code in teagood-yakuza35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cfa87e16fd389b69c6ddac104e897b730be9edd048ec93731cb0031ffd718ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159633 Malicious code in manda-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6209af701a75cabf5fa6c1f6461c9fba7e41d232b074ca5c6d8d2f5c051d3cd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150651 Malicious code in @miptaa02/fis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ed5b2e744fbab740cc611dc2076ef5892c7490d9413a61436027bbce597c905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152509 Malicious code in alvira-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb2464fa588ef949c2ff3d357dbd0ad1be424c9d02be113e148f0bc1cabe5e3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154230 Malicious code in dajouka-trssusra-tazc12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91c6a8db4c3bf37ba0511166b7716285d7ab2e8a7a26a59ac1d4d712f395d9d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163006 Malicious code in nokire-nakala52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c933c249e35739b9541b31e957b54f2c241e771a40432b946c03ddcf8305b807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162101 Malicious code in nokiraifne-asa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b730e605b3c0d466f0b5e0e086780a7231b7e1497adf279ba27cb04d517be578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168249 Malicious code in tealove-dana41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 288ca44ff86aa763e686742df3a22fa9717434da739720e6431a67f344717498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159180 Malicious code in makan-aiga-ifu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdd974d9e49ea498b87cfc41f393982097160e9a8a3a38c4df42241a8f2733e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168588 Malicious code in tealove-okta12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77a0bf54ff8bc416aa20feae26d79246ce4547064e05d5660c2e47120b60a279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161606 Malicious code in nabuf-otoimban-igioamao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 647a12ac6f2a3f65388d636582829cc5f2f26703fcc5eec9e843c3b4e011e6b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151434 Malicious code in abina-mibiian-upmmia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1779d555d637d032ca22edf5361c68a083135aa978f26f51511aa3889af63f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151785 Malicious code in aciyuudua-idut-daina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41e824e4a03cddd7101c4fef5dc44f830bedf03570c7d634264a0e062b5fcdd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157439 Malicious code in kapai-safoag0amaa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9821e05584c61f54dce98e5453936605a275c124644f8f77f10f43ed7d1aaa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...