MAL-2025-157992 Malicious code in layla-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb89d187f152ad0d9a459760dcdbed24b0c0182e86b7e5065d69a7abdc89b7bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158452 Malicious code in lookingan-nalako42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60622a0e64376ba428ef2d1d2a4f644aaff9eb4a0170cb24148370f694ee189a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155247 Malicious code in fitrok-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 950ef80b3f56a7a8d7db82dc5261d4a1dff42dbc7e624e213b547728190ca1cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167976 Malicious code in teagood-yakuza2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bedbe5f2f77b65c783e587b1c731a934b81731933e33a0f8a915adea432d4e7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168032 Malicious code in teagood-yakuza71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85bb97b5f0e3c4d722d5b0418b070b72fb62915d76abd0576f26cef8014226f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157134 Malicious code in jurss-apsa-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f540e9e914c4324c6a695e7ba88b85b67bcdec64501b4e230fd8d54dbae1b6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150203 Malicious code in @mipta1/saraas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4fd2bd38773cebedd07ca5271dfdaa2eddeca77201cb739d188d3910c05e90b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152953 Malicious code in astia-alabokio-maif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d44193f1441e7bacdb3f9dfd37fdc09f45b9bf33dc1901c8b182ff96d5f448ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165535 Malicious code in sabufda-muyu-bgagfaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b33071a9a975c970b9729ff70d8c8882e66bdf8147fc27e82c72b80e903f1ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 777b49e49a8c0a24d1527706dea286eed555246c3414bff5bdce998f9bfc4c51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151484 Malicious code in abiuba-aviumungi-auabugati (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f273fab61aa2fdf0e99f4525ca53b7341c8125158918ded74189a5aa4006263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geckodriver-pino-cz-conventional-changelog-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ce83330e33af31a4262cebf938f3ac289ab7d0b0a54a9d7e8419c077288380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-phoebe-kaus-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69783bfba45e98d6a435b4c9cb6d5b9550e9c0d504d05dfb30783ac4cd3f6787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in native-backend-dotenv-safe-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781f6d6927036e8ba7935aa91fcf468079fe5edef66c51944922fd9b13d986e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-upgrade-eslint-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc34ad3d49dcad1f0421367563dc40724da0c20deab13ac06e1f0f83f6a092d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in figures-comet-markdownlint-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b444d2ce3198df02332d69232f00a086f98bd5de52a8dcbae43404a3614a3a96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yaml-nightmare-command-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22757024aa3a3d10664748a50311b9182e726fc4abcde0b54f43b750cb3c57c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-bellatrix-dactyl-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e4fcfc725bf72c153080133ef83094f7786e64163bef4ecbee61d8226ab4c70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cz-conventional-changelog-eslint-config-server-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e3969b8ec88d2889697f34d76d21306f4eccf27e7802b4fe056dc0fd3bac7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bunyan-nestjs-gravity-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a2945766e719b272c5befa7d59051355b159245ccff670eefbedbfc435046b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...