MAL-2025-166135 Malicious code in suharta-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 028556c56dbb5d3ab9034602794f6e775da194685e30ca9d67dbda912db03900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165053 Malicious code in rival-poke68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b010306801ebdb9db6e94a32d35f4d925582f1b2bc007c3eacdf60c0a48d571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161552 Malicious code in nabuf-otmbin-nuyaagfgad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad6cde77c1349f2b7277570b6ec13536be0fa348644fee09866d640bb01911f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161262 Malicious code in nabila-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fbda564f96101ae28dcec132a3640c1524cb848206e7c91922eda2db807d0dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152649 Malicious code in andriani-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0368b4524fcdb4d298d78d38da1a9faafafb732f45843a793f083a42558c0603 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153657 Malicious code in billa-101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0dc56e7e0462f9b8d816f9fab45b6a5f4cdbc5883a99a0ea220059b78e3e0eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168521 Malicious code in tealove-nice41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89452e5344d28dad3e23c813f0934f9f2d5c05349e42d4b4c11ab3f0de27bdad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164004 Malicious code in parwo-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94a6db169474ebd98f27e29c9be70dae713d668ca774e800a5b7c81a07d14ac4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162656 Malicious code in nokire-kilua64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc6738587f0a97156be8cad98e461e70147caf89e4c030a31e70f17337c7149e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168329 Malicious code in tealove-lady23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01f1f5c6bd916814ebe6d49c8676f4f4918953f02d6a2ff57b84d0dc3fec5a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168413 Malicious code in tealove-nameka30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdb85cf21750bccc33c4f312c6f18734779903dc4667362c3706efceaec9846b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150650 Malicious code in @miptaa02/fih (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87dfc77cda7b37c400d96d6c4d64c771dd41ae38082f1c8a6311fcaf6e6f87b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164701 Malicious code in rino-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4cd862a45e486e4db00f71aa4c7c24a4a3780f5e3193437843d46a10e884b98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155254 Malicious code in flight-danger-fan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f414f121a3999e29dccde778c879db57bad7c9f22d2eeca6d38ca8199f4b7734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162483 Malicious code in nokire-asaka14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a224cf9138bea94ea53cc86bedcdb7b4b281ce05e140bccc006f74398e207a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163701 Malicious code in nudela-aaaf-gaafodfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72cf915e617fc45d0166f9d289da55dca38c478e519bd959925906341d2c39e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161302 Malicious code in nabila-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e35bce9fc8b60ce393dd1cabaf60586954736b621e69cbc37ea6f4c918a4f7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168069 Malicious code in tealove-aruma15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c1e0a02f2dcf311ff592b1bbdde3c2e8769ad944c33a07dc96c3e663f60b7ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bunyan-promise-mongoose-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53bb462501821db097afe4d817964df59b4d319045bf01e3471e2e443cae8cfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-pyxis-cypress-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b99e2e262d6206a7c37e45b03e962ce60c1174ec7a7502ec42642eb7dc5a3fa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...