MAL-2025-164601 Malicious code in ramadan-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd3303fffd0cd2c820c512feba873064e27b2ec0fc3a2d8123045a8776ee2895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167847 Malicious code in teagood-sukuna89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6e5939156a180eb9ee827473e85c81f96611fb017cb3362afb21cf6063896fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154395 Malicious code in diago-kamoli-lumahok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 544f3f70ab816ad4b09aea8a7aa432621f7c29b7b2c5d048f6a69b2412d9422d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156400 Malicious code in inal-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2364bb0cf3345eda4d21f886f6d94f6d836f1778dc9385ecef31b7496d953a18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168809 Malicious code in teanager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 721ab6422f2532d8262f3b4e5f68cafb0870075010fdede9e33cf58b54ecf157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162645 Malicious code in nokire-kilua54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 964e16f46416b1cedfe7240df501568bfbdf15b570d8474b82f353a1f299bb62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164676 Malicious code in rino-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 323c4203bd3f1881f6dfe5e388f9ca02ce9f1cd2b7d5a21b1ef75d6e8b314d37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152714 Malicious code in anjing123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6176a2bb7813f0b578de8659121c37eb7740b2f6ffa266f1ccf1310e4355634d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157921 Malicious code in kuroichi12-gdfs-fhjk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6f5ccac4306da31d4de263959ee7b16ca6f887611e3a132910a9ecd86e51dfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152230 Malicious code in alfiansyah-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28db6404cd0d2f4e3902a5221030b1e9911008e4d5011c908bacbd13435bc428 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168178 Malicious code in tealove-coki22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7124bfd69f3dddea81305aa12418ce543b57ed65d9c1a7c017a3b113dcb78fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150218 Malicious code in @mipta1/sdaasfddxs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2173f37a5cd02af337243e892abb00f30887017c7ce6b12b9e5a12b261916452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157212 Malicious code in jurss-sdfudfdd-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c046ffb8c468169d74e0c5a44213b1cd3431861b7858e21afcfa622411ac3563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161205 Malicious code in nabila-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc91cc8a98e7f40cb57db2390182e0eaecbdccae059390866aa5c099cc33a96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169186 Malicious code in trevora-cir131 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6451cf979834e9ae00cb79cdf882f6f730b3431b7475ef37a18c53fc1f811f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169349 Malicious code in turisna-sfpsa-derueaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c914eb5ee678590551fb91abc6aa59d319b6c7fe9ef208e79dae348dcf83263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164207 Malicious code in pilka-luniu-kanukuaili (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84b310b6026a10ea67b4d4573931848dc4606643f71acfd235541392f5a46dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160111 Malicious code in manus-tavauil-maoihbati (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cadce71bf08a4c3ecb6ef52187c77cc35ba2dd7b628d4b290cedbdbb7da507ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madan-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa8b5a83a44d3c38e083e280a1fd40a40c038103218ac7dd618790bdb9561ce8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/iofjc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c224414a70b12b45ac18632edd535b3aea7e21fc0cc624b36c3785d2c081ad7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...