MAL-2025-154301 Malicious code in dia-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85d98aa1676257ce46634343bd2bb532883aa0d23469169933cf7d47feaf49f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166372 Malicious code in sunden-udik-vamua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15c7ffac3eaeb033bd372e7ea4c1eb3bc3e1bb74f32475a69d16edff6fd7029b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158011 Malicious code in layla-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d516434544eebe424b3aa2b2a16c04ac6cede44c80dba53efb33a8cc0bccbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154972 Malicious code in fadila-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34f7c41242bc81e00b0321092c34a3f77eaffcc9914ef739ce1dc22b14372b63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152675 Malicious code in angin-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae12510bb206b3600a2bcc63f6c263fedda6b39001d96a5d89001fbc063dcb2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158144 Malicious code in lina-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c13b53eb25e31a3761d54a8df74e6307f7fd7848a4d806f409ae474fb251ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151487 Malicious code in abiuba-aviumungi-aubgati (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9e3429802383226c31c6480743caa66d3d0cefdc0aaebb9691723b864d583f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167561 Malicious code in teagood-nalikoli15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d91a931061fcb62d1fd2d120c43e06ad1091614b1711184b4668ff816615f5a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161649 Malicious code in nabuf-otomabin-nojaggu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eafc6e79a92f27e736aabbacc9f502f75fa80dbf0a3377cd6e4c2c1c55c9abeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164028 Malicious code in parwo-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e915035fc1673f117f87feaea9be8e042548cedb1d0225d7c2a9aa9bb83a38cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165036 Malicious code in rival-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efa89c3fc3e05a65edb80eb1ed42b506ecf44aabe10e6d2d7533cefb72e2b030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168672 Malicious code in tealove-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3643c4493ceb623d7f1c713157f17f09d828501aa1ae11d876378e622cf5bf0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156542 Malicious code in intan-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63db5031e9198b6862ea3c1e7025e948f1d1ea144f7a405bb29e83fe5eaf7bc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150644 Malicious code in @miptaa02/fhg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cba4145c5fadcd44a773d839ec72e3cb81a99ab01ce9a480fc825c4321460d7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157628 Malicious code in keyla-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25ac72abb1045991a7cec5d747a22e109aa86a1dbd7b351e47e03f2758d3bd2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158617 Malicious code in lookingan-namakita10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2abe351d0fb05eb63c236c40b3ed4d7b65315a49799c6dc933556f9dad6f3477 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164288 Malicious code in pitra-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ff4396a63cb285bcd0b848a63e178db17af12fecc1a1cae51059f5865ca1ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164610 Malicious code in ramadan-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25d1f5b5c39f8ceb3467254099d8705ce1a373115bb3169022a7cc7727bc01d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163337 Malicious code in nokire-rara48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7540c919c81debcfdfafe31bc455c1a0fafd9b6faba160e6deff2c44e0e79bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154137 Malicious code in dajouka-ad-rlac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9028a4ddfe42075a8e8c2f6a35471f3f36c9da41776cc6a11c90b595f676ded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...