MAL-2025-157092 Malicious code in jimmy-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 704eec5d4e5aac1d6b7ccedc07ce1835f6b455768426573c40ff6cc7de80a23a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170497 Malicious code in verify-tayic-aluslibamu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37683b3fe3884eb4e06cd78b12e2ba759b50296dfdda8eb202c81e1c9755cf88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158057 Malicious code in layla-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42857a3f1cc16cc6a4fdb98a1da0339aafeb0429584ab61c6ddd5b95aaefc44f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168682 Malicious code in tealove-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1cc14b32eab3255279f9a3f8f25eeb4f9bb557fe669c542799bfedc22849e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150639 Malicious code in @miptaa02/fhdfp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70cc340a6c8d221bfa3286e863305246b2543ae2ae00a7653488e63d1d46f303 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156933 Malicious code in ita-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00f3e46dacea21d3d8057e4c070f30e972d0e29af54251af767108ae804acfb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159819 Malicious code in mansila-tiafala-magololasaklani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b6e86d4fd208e76e5e10e48729413b9fecbd22641230c43cd21d916b55588eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166469 Malicious code in sunderlan-uylud-vamuiubavasiknauin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed56a28bd2b05620a123df8635b535e9086faa2c00fc7790dc76131c10ba90f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158065 Malicious code in layla-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f80da0a5c24f276df86efd5f5bf4dd643c17ba8e40b5b08860d0ad7a1eb979c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158168 Malicious code in lintang-tea11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cb61e690cf0aedf80428408f898e1b5c03691ac4515b059f1ac14cef5c0e48b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164085 Malicious code in pilau-akablu-kna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 875288025ba028ccbe4c8b21d21a34fb3821129809b70f2c7ea2a9cf5535acf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155562 Malicious code in gurs-uyts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d4ca2a2103cb896e9bf9aa5b5395e6b67c237b6e167679a1b2f6e100b40034f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164192 Malicious code in pilka-luiu-kni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6777af48046ec63235c815ce79a8caac0e22eab26d2df8456eeeb0576490795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161600 Malicious code in nabuf-otoimban-iagafaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71f1b6de9bb25583101ae11697c3e50c4061952fb44ef5e0b45af67116b7aed6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164265 Malicious code in piluvaika-kaiuablibu-nunubai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73641475ca02e679f77691be20a2c71871fd6679d87b26db746e6786068695f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167365 Malicious code in teagood-nakamala95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f1d493ddadc605a2d9d5d2d5231130efaf1e660ce585ae7ab7beb76e3c42c4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156875 Malicious code in iqbal-poke66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0963a3690235ecb2b18d5e206675b6b0ab216b07d8637ef28d6f558310d07fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169699 Malicious code in ucok-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa936ddaae238d30802aadb009148065a41bc7dc9d67220da976c6ab7f7a0e2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151400 Malicious code in abina-amugui-anucmai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d61d68dd568f7e64e8e04df221736873d8dc696951f4cdd48ba39d578493d47b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150609 Malicious code in @miptaa02/falak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1de7630c2b5cc60ddc1e511bdc8214a4222fc13bbc67405092816785a9700b7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...