MAL-2025-165134 Malicious code in riyanto-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5ea21d5807772393429156a3d7b85d6635b9ef7dde092beb5ecd18dded1b99d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155382 Malicious code in guras-asia-v (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be45faebf774d4bc77174806ed291f085e894027e5145addc89728ddac5c45f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165091 Malicious code in riyanto-107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deafeac2528cff227f320fa0045a290a690a24bacd51dc09346858f922f67ef6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158149 Malicious code in lina-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 846e729b08c1dfe97b1d6909c96513005a597b273c7682e86a6e82cac9d1ba4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160615 Malicious code in modirai-fuhopia-janbsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34d23a0cd90635fe6140dd7bc08746ce0692eaaddcf9b36f45b35777d0261636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165799 Malicious code in sau-nanli-iuyap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 316e9d795dc63bc7f12509a0d0f68d188a34c727b301b294c618b615b0d9d37c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165500 Malicious code in sabubaali-nalii-iyap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 715d0fb62eee38010d99dac90229fa10be9530dd9d56b647f9b29f0c286d9aa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169962 Malicious code in uinsu-lot-babm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07bb2737faba00d59b7d82bb0c64fa77579f5a7aadf26d08bd21789ef7a58fa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157092 Malicious code in jimmy-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 704eec5d4e5aac1d6b7ccedc07ce1835f6b455768426573c40ff6cc7de80a23a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153799 Malicious code in bintang-tea8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6475f78315a82a188e11f57c94f5c10302105496632ebc6e4c9a20be0b4d4797 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170497 Malicious code in verify-tayic-aluslibamu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37683b3fe3884eb4e06cd78b12e2ba759b50296dfdda8eb202c81e1c9755cf88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158057 Malicious code in layla-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42857a3f1cc16cc6a4fdb98a1da0339aafeb0429584ab61c6ddd5b95aaefc44f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169163 Malicious code in trevora-cir110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b38aee7085fb780cd71c407025e4eae1245dce7d327575ded0cee545f2b7cd03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168682 Malicious code in tealove-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1cc14b32eab3255279f9a3f8f25eeb4f9bb557fe669c542799bfedc22849e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150639 Malicious code in @miptaa02/fhdfp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70cc340a6c8d221bfa3286e863305246b2543ae2ae00a7653488e63d1d46f303 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156933 Malicious code in ita-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00f3e46dacea21d3d8057e4c070f30e972d0e29af54251af767108ae804acfb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159819 Malicious code in mansila-tiafala-magololasaklani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b6e86d4fd208e76e5e10e48729413b9fecbd22641230c43cd21d916b55588eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166469 Malicious code in sunderlan-uylud-vamuiubavasiknauin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed56a28bd2b05620a123df8635b535e9086faa2c00fc7790dc76131c10ba90f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158065 Malicious code in layla-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f80da0a5c24f276df86efd5f5bf4dd643c17ba8e40b5b08860d0ad7a1eb979c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158168 Malicious code in lintang-tea11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cb61e690cf0aedf80428408f898e1b5c03691ac4515b059f1ac14cef5c0e48b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...