MAL-2025-156986 Malicious code in jeep-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c36f97c09365306db2571e6c4cddf15af60b4a41cb4a6f378d9d696a19776461 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159850 Malicious code in mansila-tiola-maala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ef0f867e0669d40d61409398fc833e540631de7b749095590aa38ee5632853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162933 Malicious code in nokire-loklok76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac8081b6ee04fc923b7f645b290b455e30172663b9eaadfb922e2a0015cece9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165940 Malicious code in siregar-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c00b6fab8ffd51dcad76c1833935c77ec76e123bf1dfe42c4be83841549cce56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166496 Malicious code in syahlan-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fa80ef6a40614976da4b50bfaabb7dec548dc9988823f578ba446dbd6288db3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163681 Malicious code in nudalea-fofiri-agom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29b16494db10f429a213f1bad5f219a6de0df2570e06b306d9541d1f84b41c6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159915 Malicious code in mansioda-nomduai-mungu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbd53e95a297642073048aed37f83cb6991d523948efd17bde31335ddeebfc96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170101 Malicious code in upa-lubalauvalio-ilugsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b859106c7cf7f73c8730980b4f69adbff332d9207104a6f345b39df99ee2c361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159975 Malicious code in manttu-rolsae-nutayad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e31fffbd5605dc00ebe8346f34744648ca2a6a9e5e4856c54f155f8e3613c2f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169928 Malicious code in uinsu-losit-duvu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018df8d6102a7f32dfe7a533656a19e1e97e1c6e69c71fb4fb8f05def8d39bad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163639 Malicious code in nokire-zenitsu5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59ad071ee5bcc85b09af83ad6974f2704afe9a23ec54f94929754edf7bf26e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167755 Malicious code in teagood-namakai95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f8a79b25b5d77d97e3556f88e5b133de86ae3fb8343bf21a1af628e6ec7191d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150584 Malicious code in @miptaa02/era (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 008c33170aabca7033f785c8b27c8da7bad9a9e02bf8fac7396886b2cdb5dd51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155627 Malicious code in hafiz-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9aaabca6556aff5db09f0c471811716d7a35f984884f7c264b8f82c33b83df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162578 Malicious code in nokire-genji84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eabb453b72ffa96d3b7dde58862cd957d279424149c57dcda5fef31d7bb7d7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160315 Malicious code in messi-dyi-fssae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcf6561d91bbc51e0d7e3c16b97cce0dfcf60dbe8389245af8eb3cc3d0cdc424 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153379 Malicious code in avminh-afais-fogag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e76e948ac5318810bb34bc4ce15fc7ad6340f2ad8e6eef1c9c99d82b04e38d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168995 Malicious code in tehah-miss-br (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a09a93611d5e4e6ef96574356f2e84196488c2f846540f7932a60655201e81d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168279 Malicious code in tealove-darknest23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e54ccbad0f9ca27fc01f1318c5c6efa06a135fbbc491824c9735975bee4ea506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150902 Malicious code in @miptaa02/rdagt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21dc1c3f2ef6222b62a4cfd19ab4e3284646f3248057ae85ce94aa973c91447d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...