MAL-2025-167127 Malicious code in teagood-manaki6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd09e7e391df2da924573a86b68411d949df00cba2e91e20c963ba786bb0ff97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165157 Malicious code in riyanto-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 229ebab54512e6e1397e36cb3175642185601f3637aea18c4f771f0cd03e2c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162206 Malicious code in nokire-abimanyu88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5938f6165a44455470b2f0b3e287fe2935c73474afb1de277447c8b7674de7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152118 Malicious code in aji-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 221e8034b6b9ce2ada503834366af387c756033e5b75007add70242793f26a67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168861 Malicious code in technical-alin-itubauail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fcba565fae52c99a89dab544fcb629be3651a9f5f8855207072d3e490f311e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152342 Malicious code in alita-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebbbc6672d59e9b966dd33209825fda14faf7db5035bd9503c325cf9cee93802 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157346 Malicious code in kamasada-nutai-kad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76bfe7c40d94a13481474283f93073ff0a86af2f2ebf78631a44fb09088bde02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164192 Malicious code in pilka-luiu-kni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6777af48046ec63235c815ce79a8caac0e22eab26d2df8456eeeb0576490795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150932 Malicious code in @miptaa02/safa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c92547296a3eb6aafe05ea5bf75149a7e14c51b61f4b97ef9bde0981dd9d2a7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157581 Malicious code in keyla-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 291c2a8248ccc85476153af5ecc24fd077d4b47c8afa88c880ea59c3107d9ac4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahmuda-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b8a941aa19edbd0a216af2efa2ef6ce686289e7e5e3da42892f364a974bbb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04726e12fa42815ae35b5f7196e793cfb35e8ac6646ea2da54d1d4059d857b54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-mibin-upabmumia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b0c485c316633d8187bde54d0b12675f5e278c2a1ec0786685a1020b321474e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1cd6326cfe5a0deea565bd9890345293a028f703b09bf927849910829132c35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159731 Malicious code in mansia-tavil-madoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 613ee38599995f17fdf6206052629b5b242772076e7d5f09dc1911d6435b2fea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156017 Malicious code in icha-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2493d44d40022d63985f7ebb53b16b8093fca68719adde59aa5bdba3ba2b4e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155899 Malicious code in ican-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b0064f8697d5bace52a13f37c9ab6ddab55ba1c65adc5f15ef63de4dbc5d5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152652 Malicious code in andriani-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 693c99f66630e4975b765d5f8ab2b13b9fa0a7302afd8d1306b2a6d909012a33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156543 Malicious code in intan-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9fc38176e89a343098a74d5e44d446f0d3e0438a6daabe7f1f0991121c5d575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163354 Malicious code in nokire-rara63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e8783f25b31d792fedb609826d8da3e678bc45643431bbe3cdfc4674324058e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...