MAL-2025-155934 Malicious code in ican-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ad5aa1bcf9cdc9a356852363b2e390f719663f1ab4dbe20cded7fcde687ca9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155261 Malicious code in flight-dangers-fant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 808b8a03544d65a67a4866ffaaabb9ce1303c7edc3b6e59e3d2555f981104475 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166953 Malicious code in teagood-lokika84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3be558ababff29318c89c2891e1cda53b6bc6428e0b9b87dcc8ec4e5ab169d25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157618 Malicious code in keyla-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d4cdee947a6ce90c6019d3be9a4cf0b2d85944fc311aa02f9bac3584d4eb4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168175 Malicious code in tealove-coki2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df9eec00fb7805f677caece12b50364536956e06d4a5bc8927bfe2d510df9921 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160523 Malicious code in miracle-doki-uikayanabbaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d8f9482de1203d9f6de6c515d721a675377db68f94b90281b8825e901c87d87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165059 Malicious code in rival-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f27170950046e1b89157c4754977140083c9891e0618b711223a29e62af8800a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166571 Malicious code in syahlan-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46123b14a4da59424b77092441eab5b1d3a03eee3c4e71c6ab169e4ec7eaa0bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169186 Malicious code in trevora-cir131 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6451cf979834e9ae00cb79cdf882f6f730b3431b7475ef37a18c53fc1f811f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155367 Malicious code in guras-asia-bangko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809939b483ef1d299d67ab9b6abd09abfd1c74834ddb7c108da5f5409d4f8047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169486 Malicious code in uaragia-mudia-syuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08770485893317cb4411d4dcc84b196807b6ed75d241e44aa4d32c3b16c8e898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163428 Malicious code in nokire-sekiya39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ecb40f83ace977e34cfa440d872e9bee2802358c93922d914dc54d37d4df861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150613 Malicious code in @miptaa02/fasak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 433e94799b1c6b5dbdba37dd75ab9cf202fa6b10b2d29e34485df876ecd36962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168102 Malicious code in tealove-aruma45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ae41f1e434ce597b2a08379d3736b24b8d412ece621f27dbf4fe0cfca6b5887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159137 Malicious code in mahnud-unyu-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ead2b3b6bf48b4f395fd927a2d50688c72601dd783ff0a967b3600d18f0bf6ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150596 Malicious code in @miptaa02/ewas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11297cba1026799f7b2a2eb6d8b3a09343a6aecae250440026eb73fcdc82e19c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162119 Malicious code in nokire-abimanyu1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46e4b2fdb263b1fe5e83cd4befd349640ff565287c50af1e38fbc80669e79f0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165692 Malicious code in saku-au-idusanillaaun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 250b8da0a5529992bdd71793630657656ad19893048c4102355b9eee22a61a84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162326 Malicious code in nokire-arhani16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f0d7d2b32ffdc85aa3721d67e4cae0da11e5e79a57c714dbd21509b07ec9172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166483 Malicious code in sunderlan-uyud-vamukaiabaupalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector febf3d7cc5baa0b00decc54a07cb80a83504117b807f2a052189d04af6a14ec9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...