MAL-2025-156145 Malicious code in ilal-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afbc4cd7caf3c8bf3f34ede131a9d8f640519206ac89112d9081f1a819a7d957 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158979 Malicious code in madan-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2355f6aefc6a26fdc36eec03a9e90e61039eafe37151708adc93252e73fb9110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165831 Malicious code in shilang-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea2b913a7f81c48974b1aa9075d8fc1a34d8a23b3a6d94102d9fc3a83117f1f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150911 Malicious code in @miptaa02/relazy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8f4ad061cfae489ad23b1a2951012989264c4a413287b51005214e4ef206390 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167291 Malicious code in teagood-nakamala28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c78818c1881648df9e91b95ffca2e10312b99632a7c9c9581f3b953ec519f4dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167867 Malicious code in teagood-yakuna11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 853ec537a0397a09a26f453937d0e1adbeca394dde4f28cd29b5fd013f44952c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154655 Malicious code in digo-kamoli-aila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c63f3ff5980afc5ac76656675045465de4a38e5a73a8f2a62e73901d12bd8cfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162291 Malicious code in nokire-akaza75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33081e428b5171d224c4ec0b13b6e222037390e3df334c35ec36d3e0741a6338 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159702 Malicious code in mans-mansapa-masnfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 926cea04d9208937b081d5ba646404486bfdca574bfb0ecd31b408612e47dfa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153483 Malicious code in avomainah-fagaius-fofagyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac35feddd3a6f69e2a7dd6d1b89208a5b750729eccb5c13f7b2a9f8abd866ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170501 Malicious code in verify-tayic-iamsun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6fbc87a118b032a86e1e6a0795365aa153b95e2fbaa9c66ce5dcb51af50e403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155918 Malicious code in ican-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c6976197f5588f1b4fd9e7be3851b989ffa3e6ffd80446951f8eef23bbb0269 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165667 Malicious code in saku-aku-idusnn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc94b98bc1559e9c8b7c3f145e91724e205c22994cbb85448e9e841252e42a0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169819 Malicious code in uinsu-lisa-amiyanba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2675816fe88a745a6584c11dad876c03de0101c5943c9b83c98abc127a0470a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154027 Malicious code in carva-nutr-sdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c38a855f05299d6c02430a6999d7cb56d6bb07495f740ba603dfcf9eb436dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156165 Malicious code in ilal-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a7b110ba990d1a5fdc68c7c8466664e72972800a848e885c580ee8adfe53c51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164370 Malicious code in polialozina-aikki-aluanai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ee9553e477e84240712c959078e35262670a8f09b9e142a944befe7345d5893 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153602 Malicious code in avoy-fridaatqft-fafugofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f55ed6fc086d1e6221122277d9374ea9041cac93179512dd6c670b8317e046e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150786 Malicious code in @miptaa02/kikia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc530f1426bae40b5743a56fb4beb4a7d7b9393c4eb38c5c9a329880822b1a04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159614 Malicious code in manda-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 046ebf01ecd973a2aa35ac3c8daffcbbf378aa0bf70a1626d15543e60cf340c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...