MAL-2025-158009 Malicious code in layla-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45f7c0aa41c2c4f6649b38e5871863718f0a6a3d9f63a473316cdc3efa070263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157856 Malicious code in kuinsu-uyilu-vinmai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f2a188af8cb617435382f53be9649457015bd69e172cd90c13eefb71af62865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168705 Malicious code in tealove-reborn3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6227c99c5d3b0daa1a16b8d0d74198bf8e15581678d91492b3f7e58e7663dcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167913 Malicious code in teagood-yakuna53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01bed30494a9acddb6dfdd32041df4dfcaae155938b671ca9031ef75089d9b06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168767 Malicious code in tealoveness4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42fadc9e0f7f899b05ce54337e3af11293993f351f16db859c19302c9a8a38c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164895 Malicious code in rita-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0509daf36783b4947b97c54dca5e8c957776371502e21b8b3c866f8f2bf41f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169800 Malicious code in uinsu-lis-amudakinbua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 384683294dc1403eafae812acb6384930223305152a0a74c3604e85040bc3ed7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151637 Malicious code in abuylbani-nikamia-luahuubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dd61a6680e2d2c99ab15c4540e8cf4c1593f845c4e052589ad935f87d111f94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156707 Malicious code in inufgi-gotumafa-anfozai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a67d0c604ce2c7beaf53d1d9b333e74014d3fbf21da013058653d7d43ce8b25b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165032 Malicious code in rival-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fabc2eba3bc2979a8df8a46054ece1eef059a96f17ab2ea8fcecbd38929bdaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160474 Malicious code in miracle-dibok-inumiu1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020f95016fc7b445f84f19e84cbcc36f26f45f6cfaad8373a6fc1eed9d2de9fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157565 Malicious code in kentung-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e62e092b21ee79350d4a895f6cbb11b7c86d2045ea8bdddc213840c006583007 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151097 Malicious code in abang-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97413bded9c81f5de8cd8e493392b08d2ea76fd435cd0c6909df3a729dde67ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166865 Malicious code in teagood-cuekin95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2be13a41b84c69febe5c47d14e53f323540a36ee4ccc44da9af4163163d9511b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150740 Malicious code in @miptaa02/init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e2f2526242982859670747762cbbd49790b7f7c27a961cd59b06d11f6a1bfca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158915 Malicious code in lookingan-namalaka98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6759c9b0fe0f37d3e11f2585077e760426097fa440e17708d3a3e44bfcbc3868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159045 Malicious code in mahnud-magu-naikam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cadacefc174bc23fb44380f2596c0413ddbf6f264712bfb5c72acb204663f71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167801 Malicious code in teagood-sukuna47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d0d35076ac7bcad8a0e3f651ddf2fea4c234aa70577c3c4fffd071bd241b56b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159156 Malicious code in makaia-anima-gugag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddeb858a92bf1523507141f19025b1d5d9c1d5ce7131e38cf1e8d2fa19c195e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152124 Malicious code in aji-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcdec47942174cf618e9d97263be9af576d44a92c96a39fd0e21c7cfcc2dd184 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...