MAL-2025-151322 Malicious code in abih-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1c324ece74986f35d0e620e78b92958f0af04c1b47a9e10887c1fcfc4acda5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152562 Malicious code in alvito-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe79ca8f30b17b7954bd1244b97d5c0ebf8018ef56c8799d33ca5557e5aee35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169154 Malicious code in trevora-cir102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b17ede89ba3a457a0e5602e7cb00cd60f7fdabfd77daffe70f7db89ce6ff9ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154555 Malicious code in dian-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bada65aec117c2fa20f8d736ce56390567e678c00e67bbd95b5e8f73557c3471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169281 Malicious code in trevora-cir82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74c2b41df39ae17e00a34b9ad057cc496f5a91abfe41274415645caf89cfdd52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153901 Malicious code in bitha-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02782fc23cebb0ff239fd6782e5cde8a44198a711c3667f6bfc39a80dc4de87c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158999 Malicious code in madri-nut-beligoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bbe6bdbc961876685f05176c53466df1eb16ec1c332dd7653d3d9e6bbdeb628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150286 Malicious code in @mipta1/tualx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab3b5ce1bd97dfade4859f59d11ba5cb593a62254fe75eba0ce27ad3208a792f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156904 Malicious code in irashi-sea-swe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d758cfd20ad63f61a4a784d7f23d8dcae49675468821457380da4f989b896c9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163895 Malicious code in nustar-miuyu-muica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29eaa0eb8a83fc046d7e450589302bb67ce4cb349a16f009c0e32f3b6d33f247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154876 Malicious code in fadila-poke140 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0673a58b4cf9894a8bc935c7cc294f11242ffb7f2a1e164633cde3136ca4444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150874 Malicious code in @miptaa02/nyas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1a9827e9709f4403fb6cc46ae29c538de2030fcad5f51d1f7c6ea0cfb00f515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157643 Malicious code in keyla-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de49c36a21d1f8f742a587424cc4256f8eaaeec72d216a20f5a453c0fd44fca7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163575 Malicious code in nokire-zabuza81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c33cbf0db6823dde3cf150a556029aaca54cb6274b3e829168ccd87764a762 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153687 Malicious code in billa-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 521364930eb4d57f7fac3ad981ca3260b96011a1f7e744fde3e9ad3659b732c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151383 Malicious code in abina-amugi-anupcuamai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d21fce1fc2d6aaead7766094bad279014bebc3beb9ed32c808f416ea1e1dcbb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169571 Malicious code in uaragifa-mdiufafa-sayugauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ece24c727ec7ca2fd0b79ba111087320ac853a6501970a28f612c2acc918e9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166415 Malicious code in sunderlan-ud-vakumn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e51d1c48e27d8cc01d361503312b2aa38a585bc8606677cc52cd2b68c4b5e24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166510 Malicious code in syahlan-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ca333eb7fa88cc9df6db7ddcfa724d37fe733ca4791e09389a66d80cf90a3b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169901 Malicious code in uinsu-losit-bisauka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84fcf01133dc39ecd0a488530b79f95e39e987205f38895615c33d36372bfb6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...