MAL-2025-165059 Malicious code in rival-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f27170950046e1b89157c4754977140083c9891e0618b711223a29e62af8800a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156774 Malicious code in iomodra-forua-jali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25301e383f566de7851f6ccdbfedfc22b9fd424b0f1266900477abcae598b33a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157311 Malicious code in kamasada-nuatia-veasto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4729f9f50ff2110768b9a38af321476e31967b8b684f3c91ce847117649012e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152048 Malicious code in aji-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fa4236128f6a6240395ab4908336c0e7267e99ae2e6d6f7c35fc324e25e3f12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161497 Malicious code in nabuf-otin-agodoag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba0a140ffb1849f0e7c3be64466bced50055edf4f4079563449a51b4147c4c69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160940 Malicious code in munir-terd-tsdun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a347ea7d3678965735c14b0e0f8d4b15607ceea599a92bfeb5952477844c831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167957 Malicious code in teagood-yakuna93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c31e581f44251d423b8139663e69b70cc8d5c09fd148194b0c8d2f7eb3983077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157075 Malicious code in jimmy-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb92b2e1734eb7a69b1f102b452b668ee4f17d93e72499922bb083f616404941 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162610 Malicious code in nokire-kilua23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 108dbc38ee2ce7b6e11cc47657dd22ff23c6d4da8fcc3e891ae89d4e2106e398 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152286 Malicious code in alfiansyah-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8779776dfd7e86989a08eabfed8fc334606a422ddc419b565815244f29f19235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168278 Malicious code in tealove-darknest22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47215b2242d08ac71cf357d22951d23e43460e849f16ae9f30bfe1824cef515d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170144 Malicious code in upilka-luzimu-kijnuhigihjani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7c86e9f1656ccf402997d54c1055c9698e20e58e1c2c4de0cc19e1d80c3d364 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161785 Malicious code in namae-nadua-maavw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4f8f2bbe900037de95c5f7d01fb908d912abafff91cbb5bd98072240f18bef8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162326 Malicious code in nokire-arhani16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f0d7d2b32ffdc85aa3721d67e4cae0da11e5e79a57c714dbd21509b07ec9172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151702 Malicious code in aciaiaggu-idat-gofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b70a281a00442bca767926b0facf18b0ec76c667eab3eda7e6203abb221bc288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150378 Malicious code in @mipta19/gupuhsr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5358c757adf9ffaf717bb2b42db05144986181c27e2d690481110dc2c789614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167139 Malicious code in teagood-manaki71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51b8e80004f0333f9bdaca51549adce0417c06a34f43d9fc1f2e738bdd9fc6c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166597 Malicious code in syahlan-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c65755a88cec3c3096bc43f08171090c5fe0bace5a8bee3cf6b1207326f5717d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158154 Malicious code in lina-poke68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2002cd5d518aebb0646dfee2ed99be5307b206b43cab86f9c33bbbeec010cc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165427 Malicious code in sabua-muyafig-budaffu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29dccd0c1b791a08aace841e9361d2990ad57a57b855c5f39d30c1fb33469f73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...