MAL-2025-156175 Malicious code in ilal-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf076a097646a1c97e7165001621427eca6d3699422c1982d66df90d563ec8cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170456 Malicious code in verify-tactiva-bna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 795896f4573158586a0c371e48a9f8bd1ece4cdb775440e6aeb9406df76764e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168195 Malicious code in tealove-coki38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a9079924ea611e55ace16ac3308f314f2e5543f49a3458dc6903af8caf63d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164561 Malicious code in puteri-minta-mutiara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8113a3d1f42e713828e1a2f0b3d279babdc3e098fad14d3a8400a38582ea6de9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150473 Malicious code in @mipta19/ytus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53b1769479e3b1cb3187e7f55167a291f2ad52d312800523cb651744e198f49d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166871 Malicious code in teagood-lokika10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d83fcf0d48f7364c0bba85f5a0c299825ab6ea54af6b32fa68232a603972692e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154800 Malicious code in ewa-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0704c3ce0efc32ccf72cf5ae688237f7e13819a40dffbbc329ff6deb619df91a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166579 Malicious code in syahlan-poke76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47e4c5a2bc882f876e7822bb96e7dfc4c90be311644e68592d45599bb6d24d89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158129 Malicious code in lina-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feeb9c5c20d643f9157cf0c24dfa8f79d39f5969596905dc598d729c6c51874e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170521 Malicious code in verify-ticul-bisusanyaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bca663eb71b3891ef5f95a84721136352a3ecc2693d1ec5014ce60f99fe90df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167990 Malicious code in teagood-yakuza32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c70b5d5e507f8124ab8d615985c4f278dc840e9ff9350fc9ca109270aaa1db05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159037 Malicious code in mahnud-magu-naibkafufam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e161311587e4ad0630d3b1c288d382865ad4a3f60346ced7c6c18e8601d43d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160732 Malicious code in modirai-imgono-jinu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bc688e25959d29c00c03d06e9c0297c87d5a5c950dd68190efcd26a9b8ff064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169607 Malicious code in uarg-mthai-suff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd20dd56afc905b6106c51c318e191c8bfb4c7a9369a55bd360fb25481dea951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155154 Malicious code in fitra-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43ea5a411b3392cda3ddb00d8d4f3b764f895b435925719351d061b304cf2066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/denba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8cc357fecea85ed38951b7aa076b95aa699dc55bd6e4c57cf5e13a743e8a788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b85d2f4c456a7aef6f8e5bc12be11d224f68f231b8c3cda175cbba4bfa6329c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abeh-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a27c6ecaa48eedd9b58dc980e1bf2014dcaaa7d217bbb2c88757ab155bbf9cc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecafe47b5a373885b23cde10d517778a0de3f74ace5b8d76f919147d8ac3d522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ef5d84e7bed390c5101a890e0769575066abbd0fc1b3cc594f70b89c6f9993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...