MAL-2025-164985 Malicious code in rival-poke106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2de0d0eecbf68e5d1935b7a80766966d4f17987f5da648963e6fe494ccea042 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153426 Malicious code in avminh-afinagoofssa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9faaac946091f5cf10be380f3dc0d47b7041ae42da4938e97f25f0b64d67460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163761 Malicious code in nudela-gagaa0afhf-gafsafoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f17630f10176f7b53f14f0e26d41236f74106d95e82e18d47bec41b864f7b527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153154 Malicious code in avminah-fagis-gfyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76168df0cbe6c5efd9044c68e1eee84b6af0cfc5c7b0fe38a8e821e301b2fd3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156581 Malicious code in intan-69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969ca3f143ef8592d330f35cb0f78453a2ac7ff5ea5a04ed2982b22570f898ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161876 Malicious code in nasrul-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82e45f5b9441e2f477203ca45195042351b3110d57899b5b83ad6b7a11949a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165909 Malicious code in shilang-poke86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6385bb15d619ac34cac4a04d67e798db52a9e0f0a6ca3fd4ff0cc7717c9e0f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167130 Malicious code in teagood-manaki62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 939008361f7a8a79605618f0800fc96948e1421981a50702093a8b890d0b8078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150785 Malicious code in @miptaa02/kii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff0959beb6f8fa6d3bf3adb719d79ece4c3d465d821de5867bc0f2ceaf4d21bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159254 Malicious code in makanbi-aiba-uf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9c82a9a10a38fa7cb881d9447834fe09cdccea21b70580888ea29ec7d7902be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157757 Malicious code in kuinsu-luki-nasubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 951fb37b58588d77c82e199ae66fa4700160c55499b6cc02e7f47ec99e61c94a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169588 Malicious code in uarfug-miu-suf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1daee1354e93f93cabea11a385950fceab8155d4d06d2327326d54bbb3dd522a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161003 Malicious code in musasiak-butsd-fa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7974fec2bc4750cbc562213688f79e7e82b9ed546b1eb81b6ed930c6cc9b4bec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157825 Malicious code in kuinsu-ukiu-vilakanubimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acd1a335052d9d7bd530014f16fbd435206905c15a3c010f51670770b6de487e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170092 Malicious code in upa-lubalauvalio-iluagsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdc30c4aba3af80c91785511ed6f06ef355e03c0f7e9ddeac3d6017920048512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150317 Malicious code in @mipta1/yisadasfds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c7c65733897be9fd2bdba0004d2061baae432d2187d2184c9d73272a6c2b8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163140 Malicious code in nokire-namiresan83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 289d7b006366a4abf6168b2331a73c1d57dc2c13bb787a52fd02021a3dc00a8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166555 Malicious code in syahlan-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14a696c4ef9d0cc0170fc7b1286e1ccea65b9eefa9127d08e774fc9215f846d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169186 Malicious code in trevora-cir131 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6451cf979834e9ae00cb79cdf882f6f730b3431b7475ef37a18c53fc1f811f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152654 Malicious code in andriani-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70532487070f2a0deee8b4bbc1c74cc67b053870890a96f56fc6f6daf60b7e46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...