MAL-2025-158040 Malicious code in layla-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 395d61c5693975779df44414092116715e65f9772751ffddc83074808b6d17f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160185 Malicious code in masiauan-ofa-batovuila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e09d35c44f64598dae70241c6560d3c89c1b87d1b90bea6ad85f296945fbca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154914 Malicious code in fadila-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c24a6185d803d4551a0f1a0378665cb4c01fef95df3dbac0e9da42d72c11c60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155540 Malicious code in gurs-muisaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34dc83e469323722db21e158b1ea04aa2b4dd177abca0dd6f3b20f1515134ff3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165279 Malicious code in ruji-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e87a0b1c12f13fc48c90a05b8fadfdb5cc94f8c5f8d01d78e741daaa24c014a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165539 Malicious code in sabulanuli-nalaui-lubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d4280047071a29999aabcf41b3340cea172f7ed20518dd5fd8255c7850c752e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152701 Malicious code in angin-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74e04a36e96694780dd302bd88d626219ae529753f3f2392997f4abdb133ea47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156737 Malicious code in inufi-gobai-jagiafugair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 569ec289d65c49011233f28b85c2965c9b800269c9c2f3d9b9298e4afeda6e1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154031 Malicious code in carvahal-nutr-sdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 538e991000b95b12f8f89f169929dd366e77a3d2e703cefb67ec5c616f92ba5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157524 Malicious code in kentung-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b72d6826194348986e1e1884d2bb0f2acc22599f9e02eff9410397942251f734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154405 Malicious code in diago-kamuli-lukak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 740892d1ea0542285dd0b6a6ea664edab792f8e430184ecb621ab0eedbb3c490 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152925 Malicious code in astia-al1of-darokika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4020c885ad1c9eaad8ecb5078d065c91e59e00de405270c41c61550d6b2bb102 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165133 Malicious code in riyanto-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52dd4ef911624c238a1ef6ceb39852964e684020b65f38f013633710a8a4cc24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164168 Malicious code in pilka-lniu-kanji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dde541c967684b89c6cc63e57c450ed3ebc4c988d0c80eeb70c5d56806c7862b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169266 Malicious code in trevora-cir69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b87b6b46452e690575209a5eb2201048ebd7f636d6bf7cb8701c49a25006b7fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168450 Malicious code in tealove-nanami21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a97eb8583aad11aad3e1c6aeabca6d88626cc532deacd9d26cbcc331f197523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160167 Malicious code in masan-ofa-batouila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7270dfd155c02b9a0dbdafd7f2ebe93415696c4ebb50364285278943e2750f7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154533 Malicious code in dian-poke103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecb5c8d304e184bebbdd9080540bd8680d77dd414783556bc50d5ca6cd77a771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154114 Malicious code in cinta-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5c61ecc41ce209f6f2be2e0780498ff360ac97408fc1c374f2d48ec0c3da2d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162284 Malicious code in nokire-akaza69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9109e3bcb0ca43cc942c0cf50cb87962fa70d255e5c13e96ca16f648ce80dc1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...