MAL-2025-158074 Malicious code in layla-poke85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 417e38bc8db1173fdf52ac2f36454b30e32d9a4f2f496c7043cc854df0d1d0b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152908 Malicious code in astia-al1f-dareagauaaso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 412c17aaae99eba9b62e08e0ca827f6c803c386268ea8494f5abfdee38068c30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165233 Malicious code in ruji-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1330c47176c18ad4e5182afd4708733b1084b1fd0e45fae0b673010cab876c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170334 Malicious code in verify-aya-auil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbd7d74641ffa7260182cbcb9386f31611c4859cfe496916ed98ed0b117971f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150133 Malicious code in @mipta1/miftahrepo19repo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb9f522be329fba94d87d3ca5bee8c71211363da535b99030bde29cfc7df6c81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159638 Malicious code in manda-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0d0cc6a08c3adad3e053a69c8ffafd4ef56c14d50ff1e1981a2e2f41c6f9a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169330 Malicious code in trevora-mmiisaa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47eaa12be8373e4ac78550a02b80bc9ccfcb6b1ab556f700b41c80fa659ecfcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161808 Malicious code in namae-naga-nuaao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dc1e98c19a4ac4173bec5501827582e41de31dc9a7443a3e43efb39896e330e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153058 Malicious code in avminah-fagiaas-figafomka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dee32ab66895715af169c0c15bedfe2b110e87d5a26663eef687a8522060e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151493 Malicious code in abiuna-mobhani-aymaomsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64ae03f3585a202dac86a450c10db44edecfcb1b8736bb5cffdde2bec429c001 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159399 Malicious code in manadsi-scdor-nasidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84e2dbc9fc09832822946e28b80dd9d434ed356cc91f540309c1a71cbf4788d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154090 Malicious code in cinta-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae8ace698d1d9985157bbd09aba6f5c5e38b72b6812579a5192ced07dc56472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161647 Malicious code in nabuf-otomabin-nojafggu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e3e837edd4f9d9f66300c3a00e858fc4d909f5e19452b9f95c4f6317f7ad3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160642 Malicious code in modirai-igiafo-jagagigg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8870f0c8c9146f98f05283c1d1059ad39c81652a5ab378caf8805224ad8670d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152769 Malicious code in arif-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6324655cfa631b570e218453cb7f08b910faa2a3b335b122c3c3ec3b2f5aed88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150609 Malicious code in @miptaa02/falak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1de7630c2b5cc60ddc1e511bdc8214a4222fc13bbc67405092816785a9700b7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160713 Malicious code in modirai-igono-jimafagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 801a74f8a828114439eed682db5964cb55f4f185418efe6f8db3374c669c5a33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154911 Malicious code in fadila-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f53ed37c9bc79b9476f5415923c6447d11589811f08a48291cce00395c49f68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153648 Malicious code in azhar-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4e7edce9ac182ae3f7b9b027b35ddb84f16e1de721bfe9a4771fe1b4c3a91a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166525 Malicious code in syahlan-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ff6380cde13a406696fe8594661170192697769ce6129f4d3178265c24984b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...