MAL-2025-157936 Malicious code in lala-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ca7a7e634fc63fd4bd57658c656a56df86630c29f30e407f45a4d3861d76a03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166803 Malicious code in teagood-cuekin38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 424e5aef9923c6cf32f9b00d7ae0d29a5f6bb6a8fb1bf3ce7612b4dc50ee78ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162895 Malicious code in nokire-loklok41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2549bcc67b0c373013a413dadf7224e2e84961d3cde761b69aa5473d54c23ddd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157230 Malicious code in jurss-zsaasd-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42dc9c3b90ff4a75c86f156ef3426699be1503f3be94f6b9ae5c84b77e08bd94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166647 Malicious code in syahmuda-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32fcaa830d9f628881e49a10eaac287a95806d1ed8c226026f95ae0ba36f25c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163328 Malicious code in nokire-rara4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14ef12e4a628af9b1b341c7422996025dc3264fdb51c21fd79640fdbb60de2a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167792 Malicious code in teagood-sukuna39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da2784eda8eacb69cb9ceafb09edd4646431dc84f15aecff5825fc2bb1c3a84d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igno-jimg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a727ea716c6db03d2302ae2bce40fab835b2a24ac80e1a099ce6bfdf58612453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igno-jinanaguhia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 559aec7cf4fec915820da745e229b3ffd9a8acc3fe4b8aa87d17bbcd14faabd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b8d7abf27768eb08813704f15d485c648ec027b4c35c7fade49e04febcc658d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iomodra-fofiori-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e1c154a8cdb156e08482ccf45f70f29e16636fe41a887af0087fb64da1aa6ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiuna-mobi-aymsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 310496ffd99f159f1dec6aa95598092bea45c3b33a077b6e030bf3e1555658a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1ec670c33f9e15722ecdc3fe6230ff001721348782ea865b678732e7f52d8b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lubuki-vianami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4225527c8041e720cfdd92cb62dd3d5d6b8b5fe0827ce0e79bbc5a7eefd7f512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zenitsu10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e0566ddd94c27cea50429b37e623227e246078b8efe031358496679ca556837 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 964f9dcaf659c4f92c7fd73f123dd632cecd30660911a9e24bea92a1624e97cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sau-nakiio-ups012uszgxgfiek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89db817f180096e226980a6d375a20a8572b0585a7c889bd61f3fea705e4013d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3292a13196c95db949742821041db70978a9497b242b3ef381e6b8a99e194962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24e2db60432426d563f7b18dfdfbccbcd207bf6f22f3dd5a7aec6d3ff97d568e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dca203f21481a7b19ac00511f8a796cd2a1b7ab58f684dd930c38f1d56b8c703 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...