MAL-2025-158031 Malicious code in layla-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49bf192347f5a0deb15cfc718fba696fda6ce7da226f743b262cc8d704195c8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166980 Malicious code in teagood-lokina18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a4fc831dc28981c0b1ea8d67aa057e6c1cfbacb08517c6239e1eb9304bce67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154786 Malicious code in ewa-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 589957c0b687fea40bab62d6652c24552314d788d49a22c71ef97eeb2450ab25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165638 Malicious code in saku-aimau-uunmio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e274cd665fe167ab867976105333eeb03138560c9114165cbae78e7d2c0e835 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167576 Malicious code in teagood-nalikoli23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c77b218072691559c77e77022422aa011f2ec738b5d3400accc22df4d5627e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158966 Malicious code in madan-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff44d9b66775314262e78a3bfe0a8e7b70ef19d430e40e903862c54a7ce4efb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159425 Malicious code in manadsi-sfaddia-madda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 066017aa27a82eb7f8673689f394b1f2dcb27140734a0f155af66d8c41e8c2b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-fissa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f8288fc10211cdaaa10dfa5cb4c752ff9c21c868825cd75334c15cc536281fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4790a4e6b092928c158baf7df4bce004c32b97ebf7c7fea76e161a9719f9c243 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munisdr-naserf-misn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9be046a3a4128d8d3093aff600ff73644cee30510897063d91503dc8720d827b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otiganagaf-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a09752005e8e96cba3d643a6688559e14da88ba64ead2db534c806c33ad982 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-ddreta-tac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b2703723244576dd2a8d8388b76a036780a35688f4bed13b6273b3d3f067c52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/rassdasdzdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c5eef8632f09906fce790960af278af350ce5eea42a2c9ce9bf9655737394cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170487 Malicious code in verify-taicu-busauna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 446fadf80e48a9d914d22c063502349d10d0f47124011a42fb9f10b5ecd5bffd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153002 Malicious code in avh-afgagafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63bcbeb5eeac2a16e068b0de60de526fe8e3454784143027d41493cf0da8c0da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154610 Malicious code in dian-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25e23413a4066e6c5aff52381fd4d2bf77a4931915f5d7a6500af8ca4c0cb5b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168642 Malicious code in tealove-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffdf1542e5e0afe5c49e170d9bcd5272a4d8bf44a12d34c33ad1e0557928dfdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e611cce22e477277f5edff9f28b50559d1f89f7e736fe1ea33cb93957095b31b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158007 Malicious code in layla-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b0652e1563b227b1822d4fff020992bae859e66422f4975fa3f112b87c9461 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160514 Malicious code in miracle-dok-uikayananabaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404b180d6e3a2846374a6879c79d849ecb9b6443fcdfaec6668026cc4ea9a663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...