MAL-2025-157964 Malicious code in lala-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49bf78298a047631dd650027c920b99bf525c6c84cbd69b2b4fb115102354b93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155904 Malicious code in ican-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ca8df828c3367feba5348df7aac443e2969859564c4ee6f007477167e2e660 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162056 Malicious code in nedariomda-fofiri-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd1ab32bb89a2632b2b819dbd62c3acc32ebf9600dae5596a5b7a017bd46dad6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169787 Malicious code in uinsnu-lumi-knal1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9417cce5cb2c9c581d3a15a6390918591472c99f695a8f3659f58d0eace1e1bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153595 Malicious code in avomainah-fridaatqft-fafuofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f0fdaf8186509524f2af41866266a7857906315df08ee8942d56623f11b1a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170118 Malicious code in upa-lukzuli-ilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1f8d81536df8966bf5e775f6a75fc14b03578fe447bf14f3f198de287131c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154408 Malicious code in diago-kamuli-lukakima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be23cdb4b3581bdd08f627f5272c28d67636692ffebcbb39190b2c8a45171368 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164180 Malicious code in pilka-lniu-likali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ed57541ca88b41ea51e2db9507632070ece7fb489748cb40fd1f2dad63ba3ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166217 Malicious code in suharta-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c9c0a7be898a9e5967ff916238de3d126e44af47a3f068b0eb79ec247fbaf44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170037 Malicious code in uinsu-loti-nalu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffb5465227fdf421121f61e3f8234b9197ac9876abd78c3089b7a5ce86b44bbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168434 Malicious code in tealove-nameka8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49a1e9b0763294ab2af13d599e5e1a2a489c329f2f31e519a14306865d8fd65a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151508 Malicious code in abiuna-mobile-ama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7edb5cdce5cf18435aa36390e4fe26001ec5021b67be4362cd89253aa4aec761 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154819 Malicious code in ewa-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c75625d8ddee542d9844a25c67e63f4c03bbf570737590e1088e0a32c95a205c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165775 Malicious code in sau-naki-up (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db3429663b31fc22b9676b63549e648ac892435c2bc2f7006a7dc2930155aa2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150681 Malicious code in @miptaa02/fvddd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a43d92207d39d067abad079ea37c6e1a72be80ef2b68968a26e0ca9c2e80fd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167257 Malicious code in teagood-nakama88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdcb2ad6118fe9163d39341496266c01525f776c8b5bb03ae0bc08f5c744a5f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158392 Malicious code in lookingan-nakomi33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c81ac799624117bee8b34ee58928f9214f85e023151916dcab2e74c7e583ceb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161358 Malicious code in nabuf-oguof-dusui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81cbec3e9e363edf830cff77f8b0fe40340aa7e6d8c97884519f109ec0e80f85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160234 Malicious code in mattu-mitboip-buaotada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33906b7cecf3a449bfa64a671756c15ca35e1d488c1c48b91e529f1ef0583178 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155830 Malicious code in huda-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8599e5e2dec73e26203d472053f60d1dc061a9093b7772b59196b5151aedd64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...