MAL-2025-162906 Malicious code in nokire-loklok51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fa7f8a7f3ad5bdca40f1fe33e1e82e5aa43738fce356f6965247161aa3b780d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168137 Malicious code in tealove-boy30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c89aceea6692cf38ee0aab283f3722d5ac0c5553d8e0918b7b92f4705b4f9f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166990 Malicious code in teagood-lokina27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7c2d5d770cca5784708811fe871b070dc8086b1c4c4f97dc8a1b076ea8c9a14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168116 Malicious code in tealove-boy11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c80fa2c450236ffaeeff264fe795be4f679b02daaaabbb98221deb345ad21379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160519 Malicious code in miracle-dok-ujai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3571682adc11a6fa1a8304bfac44fa876901bf2c459e82485f8bfc4c9a8930f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164747 Malicious code in rino-poke96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b0439168772c2786c7954b6ca39a211b74eeb233b73c554bd0b3d0cb4fd473e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161971 Malicious code in nasrul-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58570c7ecb3455b2fe2f4693245a855937d4fa0f91349e8bf0d95d19a62548f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150948 Malicious code in @miptaa02/sfiyj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00f04ca1422282dbbe6fb7a4e4b4cd883ac358a179810c57c4be75dc0ff54185 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155339 Malicious code in goodmanmax9250-leader-circus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d474d3e2631ac710c373dddd243be7a5fc1d730dbe455607acf0f8618fabca4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168547 Malicious code in tealove-nokire2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5c5a4ba6c31804c833b05669def65318535a8fd6c8da09296957d91fcb0d0e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169344 Malicious code in turisna-gssad-11as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d1d1a99c0050cdd3efc01dfaa813f3baf0a6dffda8cc90ab3d83937aba0e694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159496 Malicious code in manaf-asdsssin-muaanst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75b787f07fa0c4614e91d9cfcd40d5f18da6b99ef187acad9840a1d1b3c3fe21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156674 Malicious code in inufgi-gotma-anfozai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51908b4697bfbf899c60047f920d40371f07dcf8da04e055d5194e98089118cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161890 Malicious code in nasrul-poke112 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27f2923d0a60833ec4eaa4704329d3bef8676e8f2b18847f3fd287f10d5950e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158009 Malicious code in layla-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45f7c0aa41c2c4f6649b38e5871863718f0a6a3d9f63a473316cdc3efa070263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156870 Malicious code in iqbal-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1067091c39e0e5fce241c836b9ad1796a166f00fa1484fc7ff09d68ec99dec2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154720 Malicious code in dioalgo-kilp-akiualaubananuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29fc835a73f0bf1dce91ba812442be082bbe965e81b3a96e282768df04e59a6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155920 Malicious code in ican-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c13684937374e3e19c3afb330ca6d082ff24a5068c805a2944e2d0980f106d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160509 Malicious code in miracle-dok-uikaabaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b5323d8299d368a3c4d61b1b6f3f8d390ccdba83502950ed8a85f747881fd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150205 Malicious code in @mipta1/sardf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01aa05fe7f08ec7caa7fb68b35895e1386c28c75445017429ebeb3d028bfe965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...