MAL-2025-164695 Malicious code in rino-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a51e6a397b2be34bd7b7b08191c247b79d1894356af19c32844c530edaa1bedb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169157 Malicious code in trevora-cir105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd45d584cb4b4289c4dee84dea65891e6a5782d3f7d40e01813576dbc71b79e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166548 Malicious code in syahlan-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64b49a16bfe8a475f3f1a02c4e76a81a8df7d14de8d5df43bad7ac6d9380cc30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150753 Malicious code in @miptaa02/iris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa9c22ff81e77e698805918dd5f2721f4e72b1161a228174829625792c581eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161921 Malicious code in nasrul-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d807f70b00cd76eb796275131be1e8ebd47a0a53e1fb245c47881b00497134fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164165 Malicious code in pilka-lniu-kan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a164b3fc582daff60e5f37a1783a64bd147ce5ff27a28680436c34b86be6d5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169247 Malicious code in trevora-cir51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9634cc9dffab094e9c48009248b4cfcbd9c904b4a8aaf4e8092d11be7c28b0d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163375 Malicious code in nokire-rara83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a28b14b9de3ebe81507c1894a76cad21258bd1e8f42e028d55f3ff21d9a0f61f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158538 Malicious code in lookingan-namakiki29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a62307002b6949ea836294d8d65fb6fc900c5501a917c1b0294652114e7a87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170110 Malicious code in upa-lubilio-igsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df196f7854187d193b624f7666452634f4f1be6f08a18fdf5127729a8a36282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168414 Malicious code in tealove-nameka31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a16451c78cdba92ea606025340e8ffd1feeb0a14cb8c8e2d9c57b0be2c1c2321 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168451 Malicious code in tealove-nanami22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd12e735ed5cefb55d27e68ab006ee94d42051676d81010704e3b98bd91d5da4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154867 Malicious code in fadila-poke132 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5b9bb479e339668d64d5729b29aad677f0352dfe0bd2f7befecf99ecd2e1fa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164336 Malicious code in pitra-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ca91d58e2ea102ffc5eb2f75fce92a7077a7171e0d0d57d2c4216920e46903b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162333 Malicious code in nokire-arhani22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c996dc4b75532b5663087c3b5102151c5542c6d6464b609f67f5ce2a541e38b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164139 Malicious code in pilka-kalimasa-vubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b4d3225f28e96f2e07ce90301f5547471e1aa2eddf488ba96f6a6c21746b0e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153817 Malicious code in bitha-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 476f93f13a822c03b0f885d2864cb68dca592a7799c4bcfd5174edb2c87ab836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152245 Malicious code in alfiansyah-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b9b4f39374d9f313e1f09d3b3afaf604bdfe3fbb51b59e5f171306f42f62435 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163767 Malicious code in nudela-gagafhf-gasfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c05b4f8aafb7ab3a2ed867501c6044ef3dcc374ddc4dfa3080b0b9b8f9e1b4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161684 Malicious code in nabuf-otomabin-nuyasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3622a572a2abbc86022fb7df5e5b328d71c86bb403a0b35c643cbac94e55704 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...