MAL-2025-164585 Malicious code in putri-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f950c6ebf3982fbeb05e061e5465dd771f4efbc4b49ee579a092aa4505c3cb0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157464 Malicious code in kapvino-siaaiama-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c36d7224f5335835cfaaa7f2bd5b9bc337b7b00538409e08fdd33923e1e9f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157594 Malicious code in keyla-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfe502eebbffcf218be22c7490090a4dfbac19255a362ccc3771b1eb2c209d9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166706 Malicious code in teaa-reborn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3cfed3862d31ef55192873bfcaf42c8bd3fb0f142b649b5e439636f5b899e62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150723 Malicious code in @miptaa02/idk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c53eab853c9fb05df092b47e3137ad3c754afe678ff4aa6b17c847d69f3818 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168077 Malicious code in tealove-aruma22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea89cea35c47ccc97a8f319935f38bf42d8e57f965bd143855b36668b5a20c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154999 Malicious code in fatidra-faradda-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1876cf3bc90c481fcce39514b9ff52414343b152bbe8f878251aa4c551be0eb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167357 Malicious code in teagood-nakamala88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28ad0b970f8a29c81c023bad5705a25fedd8612c8c20930bb449d83c17ecf2f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158207 Malicious code in lintang-tea47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afc0122c85db070143d340da640b213a3f472a35cf744a4f77f9726340e8b37b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167393 Malicious code in teagood-nalikami12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f0f2fca645045be2f6590d07a12a9ee8c6af4157b7d15a272eac86020594813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156449 Malicious code in inal-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f20eca48cb9196eb52a80099e89b65173e1a3e584643af7fb9c332d785a725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163034 Malicious code in nokire-nakala78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dfcd60e840980838c1df300f5dea1cd20a26638b8254c96910a1e7145c4d5ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151663 Malicious code in abyikula-nioybanali-lauyubsukia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 798825b8a18ecf1e5e2ddfa6a3b2cbc03c5c36370817fda7f84574ecd6c906bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161662 Malicious code in nabuf-otomabin-nosafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6485bc850f0c419d36c74a1daa2bff73c807b27b03a850aeae3cc8086df8e738 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158992 Malicious code in madan-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f973dec5c14b4f1d0f909445396b6fba46de816b4277c4734e968c6db7f8841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150139 Malicious code in @mipta1/mihfcs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65053a0ea57286c8f16ceb1a00ffe1f36b9b99431504fd2907618ec33e33ec28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165003 Malicious code in rival-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63134ba9e3325a7055899f2eeccbe34daf73bff1bb3963d474c9b3fc1fda5fe9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153370 Malicious code in avminh-afais-fodafaghog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 426aa283ff82efdceb30323a021e471f7f5e000242f0c9ac676ce4b1b9e211a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163392 Malicious code in nokire-rara98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a0816e8a0df2fa8bb42fe349e73ef441f7206af997668f7c5cc589360728768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157811 Malicious code in kuinsu-uiu-vinlmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4ff35a6f8351344f672224d5c27ef68c2b7b061c3c52e2026cf3e00b090d8ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...