MAL-2025-158053 Malicious code in layla-poke66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af1339f08ec0ce58c4023193c1ec1d2a59e02cd5e5af5954b10b37b627d59edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154612 Malicious code in dian-poke76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 528c488b13591ca71ec96a76fcee462fa09feb4f3e05acef3289e68c2c12f950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nojagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68482d81da8b27b87980c467fc18173de06c50b71b2d41ebf57c689fcc702e63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13c4370d6e67d863d5f244f34cadba40b5ebd4186f563e33ffbad73fdf217534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db2a87daa5fb8af0dadbcfa299c9f6c948809147fb3ceb08122b64a64007130 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1740adfd682b50ce078e563e0c89f176aac5504ee85a73245751c28bd38b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5dbb846799b5179c558dfbcc9188aefcfc4181fd55d7780caf8903601d53d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165394 Malicious code in sabua-muhyu-tana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b18a7da12878b8038eacf08b231dc67468cd5551ad693c46df1a2290244b6669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166400 Malicious code in sunderl-uyilu-vanmiun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcdcb8a49241cb672dcd231303c106f1d1b3c0fdd0aa07c4387053e70603c56a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170147 Malicious code in upilka-luzimu-kinui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 905494ed50b2ddd8b4886025b0a25e92179ca26ce40169daab732dbf9939861f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151636 Malicious code in abuyilbani-nikubamia-luyahuamubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a17dee6fe19abf9406ffaed51169414831c7b34ecd54c47a3cc19f8fb1d79d1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159035 Malicious code in mahnud-magu-gomia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e425cf15fb78a109e9818eba5a1c46ecb9c5a457708878ba7fe2105d34bf4bdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162680 Malicious code in nokire-kilua86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6d3e68e303b975e5c12fdfdcec7d4486425ec8f10ec18b8c869c03a51d10ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0ddc983769eefb438f9559056140c73efd21a88525cf0cc4c201333e416cba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb2396dfe3ac8a8725be8a75de9cf22ea89b7113804c37f2960e60ea17d1ca40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b61ca3e1c59ce28728de34beb8dbac8972455d95780f068af223f5047e02d56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madan-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 095401287eac283af5876663379735f7f55ab204635c0e5dec794aaa0b8188b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-mau-nanaayma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b04d32b02fde0c4293b500f7f54d3f19fec78aa5297b2b97165c135e48f522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c252c09b1b7184b871c5d1e10921422c31764ccc36436f88172454b3679c32f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jimmy-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab960ca3aeedc2b2b2fa221be8b075fa8e8357718d7b3fa447ac18f14ecc7065 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...