MAL-2025-156260 Malicious code in ilop-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ff1ff15a1fb77cecdf29a3eb784aea3aeed5f316b69889265911befceab3f62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154628 Malicious code in dian-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13cbeba60ac5d3ef38cf70120cee28c5965562c6446657e4322d9e9217862097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150541 Malicious code in @miptaa02/awfsae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59b693ac3109d39a8dfbe4b201ca87ed22c6286a7a3efb22feb709bf69fbf27b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165329 Malicious code in sabua-muhay-ntufau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81b973602a914b6eb8efb674d79f9b00870d7e36494205d1c6b640d81cc55083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168191 Malicious code in tealove-coki34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa9d039df00a6d57387709dfcdcd3aafae20a77066b280b69962cb2bcd4def5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168630 Malicious code in tealove-okta50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08b68eab6996f1d17307609c82d3d37ac3123a37ab8250b6fe7a83f88cd42d38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165066 Malicious code in rival-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e04bafbd7735bf2ebf09259e3b098d5094c0b46c08a5f1ae866c6581c693074 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165903 Malicious code in shilang-poke80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f675b4f8247184928bdabcad409829fe5339f13a7189062aa5ecdf185da38177 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161237 Malicious code in nabila-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d59949fd2a3ded355ed70935d71d06a7345dc3953c087d2b14e504b424bee5f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161194 Malicious code in muyatia-nitu-muytio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd85db0ffe2aa138bee9f0147e4f7401e42efe49c6347712ddf6730c09a50920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167050 Malicious code in teagood-lokina81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33f8d55b1a2fb509d6eaa65f3c3cd9c47070c10c03b586cc4c323bafd1e22012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155658 Malicious code in hafiz-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 531d0caaf2cde354766f7e1b43af229d8ac8f738d7f2d0e39bc02c00fb3dd1aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151050 Malicious code in @miptaa02/yyds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f8f2e776f31441b732519e14b7245567940b4063be9fb49abb02c9b9fd57271 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167137 Malicious code in teagood-manaki7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ee5bcf9df6aa2781957e35443b47ff7240bd46db2df72ecf08f2ea77cbcaa4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154936 Malicious code in fadila-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d07e011f8bc11d569706f2c009b17bb3d2599e3510894146d1b937092ec2c9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169323 Malicious code in trevora-lliisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c74f06dee5402dfca9bc43fb297ded9dc5f14c63fb82f160aa223ae15b238bc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165984 Malicious code in siregar-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70d54313cc3df7f6b715ff4b2b0179fed04e549728c3706a7e9fef3a726cca31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151220 Malicious code in abia-avugi-anina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1840b4e176e64c0612427263e85af96f2ec8b8af81e87acd43b595e7ecfb054c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168886 Malicious code in technical-alnbio-tolim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dba7b58706e9c7972368dbc329ee2c9406473b6b5e85b7e392453ca647e42b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154279 Malicious code in demdadf-sadudar-ado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb080b4ed5656b9ab5867a83060d7d508b761e46ae61eb4af640f95fa9a0de28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...