MAL-2025-165904 Malicious code in shilang-poke81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21820ac562e4f6f339152ea1e4beae1299f2d00004f76b27a2a838182949fc32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151842 Malicious code in aiboa-moilopie-aromioai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d47140bd38da07fb25e3b2945fca2a229c50a365727a884dcb13c4556ab13e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150918 Malicious code in @miptaa02/rgyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb7fa6d2d11d27bf4863b786b05e2e1a9a89f58476b7052dece8bd6926f18eee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163355 Malicious code in nokire-rara64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94553c9bff164900fc849333a5e0cd5377f216762281d1df92c335781d1235c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153183 Malicious code in avminah-fagmas-adigfhaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d68b7e30bb3b35272fcf38cb81b5d840360687a98228e84337c9eab3d89f58ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157904 Malicious code in kupai-ukuta-jok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ea31090c55f3d61479fe19f1e4a19c34a6c4ccfc01a1dc22630bac1de15a97f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158991 Malicious code in madan-poke51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d8d8123c9e35677d470e7d346e62eb78d99a0ffa6cd9192432379f88cd0934 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157197 Malicious code in jurss-gsd-a8s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7832512f0a6444ea55066669949cd8a29bb9b367776a1acab8c93865b8240f24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162209 Malicious code in nokire-abimanyu90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e25ad5e98d940e6ff708f24d058ec290d19616f5897bb7990fa999d7eefc2c5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164181 Malicious code in pilka-lniu-limaubikali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53256f05192d03b5870f2d9a9ced84b63c62a60c71ac609303eaf14f71d6cf9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158085 Malicious code in layla-poke95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5615684b0876de06d497e8c6ae487815e7976304b9b3eba25d36ca4db18c75b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169632 Malicious code in ucok-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 293044cdf88d88ab9c2ebbe083f9185fe6c4b7f30a8408d8f4fbdc03687db481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165081 Malicious code in rival-poke93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54b2dd498aa7bca93f2f91a076610c8f88325a25d971548d8917c0292faa5ece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158240 Malicious code in lintang-tea77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 778c6d633659b486d3c1a866b0be9923da4ba229803c5befabc1c100b919fba8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168087 Malicious code in tealove-aruma31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 512258556632ce82935edbd468887003043edfcdf046284f835f7b9b523195b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159342 Malicious code in manadi-scior-nasuiofp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ad90a24dbf8397d37b8957eab806be56cea9ecf4a2643e1aa3b733fe0ab61d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161157 Malicious code in mutr-sds-bata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b8430f78325a2f53e9adedc6988470dbb8764a16420c47ea72aef997777e3cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165284 Malicious code in saabuli-naliki-lusbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf8b1efed3fb9209f6be24683b6d82d9e56c9c3d555430a7823d157930e5605d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150597 Malicious code in @miptaa02/ewghj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2fed4973c713e529319aff36f07a33b9ad3a0458f9954ddc0ed3b177f4dd5b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164029 Malicious code in parwo-poke56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a72222a4b056505c3ebf31923ada9f20f10278eb071b400aa4ad3563815e3af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...