MAL-2025-165882 Malicious code in shilang-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b719589bd9f639b59d54fbec73fdab44f4d5a3ecbc454144e8e7d69038e0360d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160336 Malicious code in messi-sdubda-sdfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975abcbaa1f057db3a7715b3c47d395287dccd5469c67623162cd045df96948a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152881 Malicious code in aril-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaff9788645669070bd0d7f86d8c3a1e6c1beb3f05e8b4e4196ad3d873635b89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156389 Malicious code in inal-poke115 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c6164e9b436c0143f0898c9a23263ceee625a395d4e14bfc4de2045b32bb86e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169291 Malicious code in trevora-cir91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2052cf14a141b39d0293265897296079b439f2d8cfa4058d63c629d66c223125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161890 Malicious code in nasrul-poke112 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27f2923d0a60833ec4eaa4704329d3bef8676e8f2b18847f3fd287f10d5950e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150851 Malicious code in @miptaa02/msda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd91cb98351519a06778ae6cfb651dcffe6d96c82cdda0bb4619ca0b14ba3102 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161967 Malicious code in nasrul-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 968639f483d7cb71eab443479968721701ca4fc56e9f058f087ef682f7cfd03e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161718 Malicious code in nacho-bunian-c (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08deafd3bdbddbf5ce5f5cbc28be6529ef6252661c07dfa1c1742192a4272f6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169692 Malicious code in ucok-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02229458c17333f4a0de131d04e55467cba0bd528c184648ce9675d2f4a6e764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165899 Malicious code in shilang-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 695921df7aafa6e3f8617204c29e5c95e4ab67e79c908c8a2746fe36322be947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159836 Malicious code in mansila-tiala-mhlni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff7de7946f174e48d53580a5ddb015fc038cc4bd8866ceaf6039ed6f87ef8f12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166166 Malicious code in suharta-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b6cb9277a092cc6b05e251fa105772a11be7e37711484a2fffdf2f44277c329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157094 Malicious code in jimmy-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d8cce5509ef6e6dd6af6775eaebbb5bd36435ae95d77eeae297533574571799 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167405 Malicious code in teagood-nalikami130 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70120422202bfefbe672f0a350f7b42747589a79710b4e70adc0b609212b0687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168587 Malicious code in tealove-okta11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1e5214265660d366821ea4db04208ff09f1216e41daaafa11e7a74ec0b9d69c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165769 Malicious code in sau-naki-iyuuap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75220beaf65ca23c66042fd2d1bb08f6dfc2e4788b3f15767a383343297953d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155650 Malicious code in hafiz-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 921071ea0974799c0541072d8be9d3730aa02dc81a90d28ce2eff1aa800ae33b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155489 Malicious code in guras-visa-m (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 278c9154cdc9d769e59b957e9975a02a68ce06e3b2302d6df66f4049b43dfdcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162933 Malicious code in nokire-loklok76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac8081b6ee04fc923b7f645b290b455e30172663b9eaadfb922e2a0015cece9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...