MAL-2025-164641 Malicious code in rino-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f876ffeaede8550271be1e35403032d064fffef37c34f62b0fb8772054ff357e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159562 Malicious code in manapf-manta-nayad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56639235dbe17285306e28b33585ebbc3c093a0df280be60bbe7f6092574a288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152436 Malicious code in alvino-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac02f9578576bc0d6bec2a702d6ff4cd4138add3b18575904ef4702beeabc12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158173 Malicious code in lintang-tea16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72a5645d58daa83d6eb7a21a2e0d2b7dbddea274e4fc20072afa32c0fed00d77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165626 Malicious code in saku-aimaku-umuialakoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35343a7b07aa70589fc1467589d11747a65f272af600d2026ed24ef8a6f75de1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166010 Malicious code in slamet-poke107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58bcbf2a4da36a6044a180266de0e634a410f97f09a54df0a34ba6f3b7f3604e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165859 Malicious code in shilang-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5645ec49365109fb8271715518cb173a6b5b225902f719da5a035478662ffc51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163339 Malicious code in nokire-rara5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c31edbbd5173829f31b80299574a8b92e2b2f173606242a32dd99e9f148d1fce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160436 Malicious code in milisa-mioya-muioskfp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3849a1cd6ba4c8f8baaeae495563d690f34b85c372cf6b65d0d829dc43d02c88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158936 Malicious code in maalasha-nut-posisio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e0adb48639946bda92df99e5a786d4aa088516300ff643c9db9c19c9ba1377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153987 Malicious code in butrsui-mudfiko-mutyooa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89219851a152c03bff832a5d78e7364815b1340254a1d579132292eba9b99a1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153709 Malicious code in billa-58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb269529b3e980d27f5521d28ca0a018974001b6fd4bb43b86ed080afac7d5d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169035 Malicious code in tehah-nutar-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75c856561fbc69f482943b9dffbe62706dc4718a5f35b517cb1bb4f5e02493e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154703 Malicious code in dioalgo-kil-akiualabannuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c94489da2df0b0c3942e44b539b452e32d00b2abc862fcb8393cbcd4d32d8a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153579 Malicious code in avomainah-frauu-faqida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae338c565abcfdf16cfeb3869b9875acd4a1b80f651366626b4670aba4e5cd98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155092 Malicious code in finish-savion-mewt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d709e6fdace29cbd4859e4a1cd84bacd148e469cf2e350a2a0b8ce5c3e6d2d0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167297 Malicious code in teagood-nakamala33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ff495ca6505608eb11e285452bd9cfa9b13013df4f0f7f3d86f758eafb1743f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154174 Malicious code in dajouka-faa-ssa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0afd3f263ecdfa3a5559991b60bd078fbcc58d0311ef2046af854e7dc23b6404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158454 Malicious code in lookingan-nalako44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bdfe1ff00b3ddc6e069caa6eeb5d372e9b3c788782c745c0701aa285a49949f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160757 Malicious code in muda-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 230269a70fe163bde1338ef7aaa3f124d579d93e9bae02ea463dd41d49e11c7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...