MAL-2025-151140 Malicious code in abel-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df07a0d7f61211c51c42d72464011ab0468b4b6588589cb0e4449f5874eea84f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165914 Malicious code in shilang-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab43d73831b37a4d79abbab857a7f26d7f2c40c0b5372f4fabf669da46a6de51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168215 Malicious code in tealove-dana10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb15e2de0dded4a526607a38900bfa3ca603d932153e155516b48a2934cd5cb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151355 Malicious code in abina-amoavugoi-anuhi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf7b1f43cdb9577708b1c79181307e87c1a514e42756d1224a44d3508eb6604 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168276 Malicious code in tealove-darknest20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42fb6b377659139a8d88ddcdf293c833a13c5b8235476ad1e0e89050c38bc47b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159008 Malicious code in mafanfs-matfddu-masan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a762632132428bb29171a78d73fdb06b2879985c191dc5b6472bbff73b20df3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168092 Malicious code in tealove-aruma36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f510d7655d504e4c01651ceb6361922e77bfb5157c5e518fcf7cd85fe0a02869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149990 Malicious code in @mipta1/dsdssf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df2bcaa870d1533998f971c9901f70d3d9d2df6a0db8c33d44c34475e7875ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163846 Malicious code in nudla-ofog-agua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 204d47c4a0c095855f503572e0f743d69f43e0480808f4bb0cc853422027042f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161314 Malicious code in nabuf-ogauf-doaoako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1dd020a885e57710b70c5958a63ac66219558e34ac72e8aff9937bccac97570 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165250 Malicious code in ruji-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfda109f0435166414daa4ee80ee893e280194fdf8d3da4b999c097d143a78e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165413 Malicious code in sabua-muuyfaau-dufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaeb7c389e515e4dc0ec49301d4cefc42a6d5e1d98e84bb0969c5aa7dbd872c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156684 Malicious code in inufgi-gotmaa-anamufozai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b755a928ebb671e401e76588a9c9188030f4a0dcba9975ca21e2739b8e99705a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160093 Malicious code in manurung-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd68e726b040ba3ccc2844b94c0b18755823a38312c9a5a1ec263fe45f033671 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168137 Malicious code in tealove-boy30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c89aceea6692cf38ee0aab283f3722d5ac0c5553d8e0918b7b92f4705b4f9f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152899 Malicious code in astia-al12f-darh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 885658f191231018e26b91f9ddbc414440df4bbeee821a45805bde2311492a12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154948 Malicious code in fadila-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb3d7fbb144b3edc3f95c62112e04797e87323921e620c12419e102404f3f29e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150067 Malicious code in @mipta1/isyoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 282992dd766b1b426f1f9ca5e9dbd146788d7238cbef01883dfef47f0b718f97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162699 Malicious code in nokire-kore13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4743995d967658787873bf95d9dbd19526c8f567b010665f6829c9324e86f3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153502 Malicious code in avomainah-fragas-ofafuaffau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 548f1600d0bc2c584ecd545d21ac2e8c7710472ac24ca8d97e88aa3dd08edb31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...