MAL-2025-152653 Malicious code in andriani-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d993b8563e79fd7546423d26ea639c9f4178eda8d1d88bea9742a765045c5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169648 Malicious code in ucok-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 686b867f043b96d87081bf04b988ce85c9972375fa1c877b1a5ac9a792818625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159976 Malicious code in manttu-rolsae-nutayadada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47317210b3cf103d7ae814f232ba0354f6d9769de12fdeb9ba1d8bdade1a61ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162284 Malicious code in nokire-akaza69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9109e3bcb0ca43cc942c0cf50cb87962fa70d255e5c13e96ca16f648ce80dc1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150695 Malicious code in @miptaa02/giyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487e401241a6920add2a0586b9824ab74297381fedae2d1b59210ff39b2b0e07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168580 Malicious code in tealove-nokire50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bebdfce55e39180d3958c00f2e7d31f94b19e3a25af8d613cc525482b915ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164996 Malicious code in rival-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b089765145552e271c9afb51aa247679919740f304d972393e029bd3ce8cb96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151070 Malicious code in abang-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e935ccb3b06a6dfaa20c831bdf1dbe0e442f17ceb8f4007e7e6ab9d54e00e6a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169266 Malicious code in trevora-cir69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b87b6b46452e690575209a5eb2201048ebd7f636d6bf7cb8701c49a25006b7fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154852 Malicious code in fadila-poke119 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c213aadf602b975e9efb4b0e7785d66aad90b20b57db7b0063231effd2ed2af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151858 Malicious code in aiboa-molipe-aramisiamia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aacecc88c686c3fb52c71bbd48b406a3a8250662fd72707cb712aa3d259530d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167177 Malicious code in teagood-nakama14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d65f1878abe15737a771767056877cb4c6d3fa38ada50d1fa958095833b1371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165539 Malicious code in sabulanuli-nalaui-lubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d4280047071a29999aabcf41b3340cea172f7ed20518dd5fd8255c7850c752e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167241 Malicious code in teagood-nakama73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a19a0b4e9ef8252e176258cf40e263f0659c2d0b0cdb2dadbd7759d0cda1bcac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153802 Malicious code in bitha-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6056a08a270c6fdc3b1dd56d4373e56ba042f334e3f82126260307cc54bdb26a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157002 Malicious code in jeep-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 691fdd55a4b6f24852450a72c6571c7ee4748b6910b6f5dc1f40e3745ab392bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169404 Malicious code in tusaaya-ssad-s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea9fc0b78bb01f9cc3921813ecc1c721738c628ea4fd6deb9c3bb4c49df67ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158160 Malicious code in lina-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0859db11df2abad61e24cea92c93efc6f5aa537eac3bb7f070410b23b4642b7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166304 Malicious code in sunden-dibiuk-itana1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3465f49f67862b8978ddaeb8b5110add640bae9d55e86db5dcee1b0422d00bb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154472 Malicious code in diago-kuli-luvuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6384557b9e82833aaaf456026fb0846daa9911d6df1bd5f9fc71a26376b65e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...