MAL-2025-152360 Malicious code in alita-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38b6f3646f839ee440e91346aa3532d34c8881c7f44c8ecb23b07572267b08c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153774 Malicious code in bintang-tea26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3a83b25370aae18bd1d76736daca18ea30577559965a0cdd920318212c5becc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169091 Malicious code in tehnah-codifad-nutaru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53e4759b68082ed297fb24926a83eec3d833b415441d56e9f9e422f265ec01b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169119 Malicious code in tobrut-hen-nubliesp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51b0f2b18ed885bd56eb53496c01ded3cfaeb84fcbf51c1141905641ef554872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167456 Malicious code in teagood-nalikami55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e77d7e6b3b079cb83390edf746eedbcb9d50a82bd4c72bd0892a0891085049a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151013 Malicious code in @miptaa02/weaddd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc322c8d24bb785b79bab067052c9eb16025ab2f171ff58c361be32f9017a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163543 Malicious code in nokire-zabuza52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adad3fa2f33a028abc3181d7e92af7eb512235251ae33debc624453ad6d3de5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154319 Malicious code in dia-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 372e77d612b0ec10fc69dbedfa115457bc9243f66a9d6110a642dde48fefe332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161666 Malicious code in nabuf-otomabin-nsgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28855ddf2fb7c9b9eecb8f1f0f36bc696a5ecf1542df3834e80642855bacca1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150313 Malicious code in @mipta1/yaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c09866bdfa45e78a9c24137e4f1b5e6b9f19886621df8e960d735881b5d79fba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152464 Malicious code in alvira-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db9af59c91740dd75934424d4112a6dbf97155ebf02517f3f9318725b222c85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151750 Malicious code in aciyua-idust-dajauagaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9487caed4f88c06300e56c16fce2b5ecca63687c378293fb671bbd954db6366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166056 Malicious code in slamet-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d85bbbbc15f102fa904b4be509efc4338b23741e92584d892e3e3263c490f6a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151558 Malicious code in abu-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bca9291b6a900069bef5ffc6a2e5bd5d7d4ee2b3ff2c29069f26526e4a0f3fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166274 Malicious code in sunden-diak-nulamun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aa78d731ecae1621e390d30f411d877511722fd79c6a501a595caab4488fe79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163161 Malicious code in nokire-nana100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3929820e8bd2a510e847736d001ec6eb219ff1aa66e0942608d5a609ec27369a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167826 Malicious code in teagood-sukuna7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63e912f9b165297e99ce121c078467a957202c8d21b71231db73cb47ba8ae220 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150536 Malicious code in @miptaa02/awae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc1eb60c4aa9c6124be2aa9d03cf0692d88f89b474242f9eaeba713852f823a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166124 Malicious code in suharta-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 208b40d1c4496f722bd4ae1496f65921e7028e4b9064282afa2c3f409b787b4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160767 Malicious code in muda-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d715e856df6c2342c6714aeefcaa57cfcb7523a3cbacc02d8fb887ba0dcaee03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...