MAL-2025-155904 Malicious code in ican-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ca8df828c3367feba5348df7aac443e2969859564c4ee6f007477167e2e660 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164414 Malicious code in polymedr-minadus-buie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f866204b08e49786bab69eeaf349b28664138d1d988a5d240581ea41ff715f0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170559 Malicious code in wulan-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1131a5f910599783d9827a72e85ee68867af77c422096353feb5490d88c53bff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155920 Malicious code in ican-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c13684937374e3e19c3afb330ca6d082ff24a5068c805a2944e2d0980f106d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167380 Malicious code in teagood-nalikami108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 596db44a02407054427c9f94433454b52b4c482e89791cd3544fd9698d09bc8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163899 Malicious code in nustar-miuyu-nasfr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a111fc7872e04c2da607fa294cca90dc5536535481ecfa87b0d6f356341f382 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160386 Malicious code in messi-urat-ds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5532eefaa324d5d7ceb84f402c8dde8a6f251f6a584cf730360ec44089aba2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156066 Malicious code in icha-82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5844cbfa2f9b1fb27d1999ad3ca4dd1e71465effa384a842252878dbfc0f9e83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165257 Malicious code in ruji-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f1a08cf40449d303425087fd2828ec66e60a59f2c98ae9328841b7e11be2200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157834 Malicious code in kuinsu-uyillu-vilanaavnakun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2c020c2ff60fcb1e876aeb8a1c1247aa628d05c3263114776773327f17fe52e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165063 Malicious code in rival-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d59141c49fb4349215248b4cfccbd41f755a41c729406301e2f6f714d3b9a57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159698 Malicious code in mans-manapa-riski (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fa8225f61e83db17f0aef997bfbd592c3eedc50420b6fd7608826c777321f34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150847 Malicious code in @miptaa02/mqwasf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 547b37dd2be5baf6f508b06012f1b5995d9fac79aa4b7145703a4e957f8558e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167662 Malicious code in teagood-namakai100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dccaa29e0f3fc9808427431992e9554814af2f01a37917e0077f48835a946f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160923 Malicious code in munir-nuys-nwb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d76b676065f30719f078b18bb6a0d952ddbd8e82157d11e675155a8b9db9a88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150245 Malicious code in @mipta1/sissuspf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4fa1147c22ecbefcc8d9672ff2c24395864a9211097a5c4e360713da4c90b32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154527 Malicious code in diago-kulpo-lukahai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6bd981bd936913b26a989c37a93a1153ad9f1665629e7a7bfea3713caa2f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158188 Malicious code in lintang-tea3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19b24896dd99c2f3b034e9aea97f517db07ca696f3828e2ebbfeb11f46836630 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-mfuf-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df659658d27aab462662b989a6ed90c280dcf8e6316ef54f2b86090b10b78ef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabia-aligumafi-agoubva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4253ad6bfd812fad6921c793222810f54d7134fe00fe19403e8e6390ed4d9d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...