MAL-2025-155914 Malicious code in ican-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4503ac14cd9286066c4d82f22627968fdc20cad853b7c694e7e48ea0dd69e0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169947 Malicious code in uinsu-lost-diunst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8548ef93d75be2d84a8e77e6a1aa634c95e66a1eaac4178df0666d40c61f8d01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163403 Malicious code in nokire-sekiya16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52011f03415a1e8b333adc5d4e84e904d3b1694f3d05f84462782ed7ccf7070e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154971 Malicious code in fadila-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24d671f890b923b00ac51dd4230d175617bc931dd47f713dd9ca2e3929f998bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156629 Malicious code in inufgi-gobali-januabalai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73beb10532f83e32b8acf5ca1e0c0f3c56714d7ce1e384bac5bccabdf14c9459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169705 Malicious code in uinsnu-lkui-kgnuanmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b6cd71c18f1295f9d9076722baf46aec7f4ae457dfcf9f4374c1263157dcbd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157956 Malicious code in lala-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8e8a549d4ff0e5fb26ba9fbcf3f13c8e8b1ae32973765cc873079a7c106d154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166941 Malicious code in teagood-lokika73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a0bd5179da118f81650798dc69a20e8d6b9cf63db9a9f6aca29470eba272bee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165637 Malicious code in saku-aimau-upunmio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f461136313998aea87774c3744aa554e2e7b8ebda5a06268d8e588cc2b33506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158492 Malicious code in lookingan-nalako79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c28f592533a932d9feaecf82bfbc6e6150c8ec4c0b2b5373d060d0a5de4d0f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154339 Malicious code in dia-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb6a0dc98ae86918a59e3c4263041262d0319faa888033a7499b53f5afb5ddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166484 Malicious code in sunderlan-uyud-vamukalaiabaupalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f3d5b6eb265765cbca6e738c743db642bdcdccd1b4c5b87bc5883373efe2c41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151060 Malicious code in abang-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b465fdbd4c69e18c5afb7190097748be218b78b43840d703dc8a6533b8b6d0c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151252 Malicious code in abiba-alvbai-ayubnaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a99df6114f734252cad08687b976fdc5c2ae81bc8baa6d01a1f0ff421660f2a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163607 Malicious code in nokire-zenitsu20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85a49080a9d8a02d570231cb80385bb966f9cabbc397bfe30a5a48e8595bc83b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155262 Malicious code in flight-dangers-fanthomia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2abed8d972d7a71224ad802584803cfc8d444497737560591dff81bd560e18e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150056 Malicious code in @mipta1/ikusho (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b65bc35be347c59e24a9508c70a17deda32ebd2b9b560a0669fce0ebb435a1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154137 Malicious code in dajouka-ad-rlac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9028a4ddfe42075a8e8c2f6a35471f3f36c9da41776cc6a11c90b595f676ded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168534 Malicious code in tealove-nice8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac3d540d19bd0af624cdfd92fe9e50ccb498e27d2dfb39996c40812a624e0b86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163383 Malicious code in nokire-rara9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87049d9c61e486dd45fb34ffbc03c1f76a57ad2d9bbc916438815798e5a27288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...