MAL-2025-155179 Malicious code in fitrok-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdcfe24f56c77b7003ab45081a39b5928aa7f0899bc6f31ead2e0fcd0d7665db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163968 Malicious code in parwo-poke109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd9829c0b774bca9baa8249e3fc7c41e91454ae0fea91f91111fc6f3d75d852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167559 Malicious code in teagood-nalikoli148 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fbfc60aa6794665f1cc64305cefb9a3f251dc149b30c08bd4a19b57d07379aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151949 Malicious code in aibopna-mobile-aruiani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33c9a76f40933ed91ffc5a3869d839eb48ac1e64c73452be5138dad70ce1b7b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151272 Malicious code in abiba-avi-aa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 565fb5ee361f014188d494b87a118acd0eec659b153bd5e0b0326edd35494bea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154611 Malicious code in dian-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69300c0eefa0c3a3738d594fb69899f3b457a21447813f62b16a9b706e581d9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150833 Malicious code in @miptaa02/mijjhj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09fa3efa66b895c69eeb499e3835f569fc59b0b1496b7075303db04406f47017 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151889 Malicious code in aiboa-molpe-amuasuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d701c46f732c139bb3a1e09bbb46dc527dc5af280ea18242867a3819a01bbaf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159362 Malicious code in manadi-scisor-rmana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 005bbda55e07a25e7a5caddd48489da7e4ec5f9a6ecd26ac28983b0c1baf7c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154383 Malicious code in diago-kamoi-liumakuakoimho (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dccf03eac50e2541342e9b40d60c87fd593ec2dbfb729504793637991448b2a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150098 Malicious code in @mipta1/kofad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f507a0076f84de378604ff6e0cc4c37b2e22e23643338ac23a2fe510a6ac2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157403 Malicious code in kapafovgfiaanggapfao-safa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36e0a7f7f20f8bb37f49de004ba31cf584000ccfa2bc7c58bfe7ca40e90eddc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159780 Malicious code in mansila-tdhfla-mafgla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c55102ba7ae9d3a325a5a80ea72b0bee84bb1cd27601463640b91367b7338ec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153055 Malicious code in avminah-agfifagaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54d0c921de549bb95c3914920378ada8c9e0c5e8ee89902327142fc6868ac398 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163054 Malicious code in nokire-nakala96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29755c85d3d0457347a94de0388a4ced1c1645c08def369552224cbda5dec9f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155134 Malicious code in fitra-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14747f0f07269b4e5ee53eeeaa64e6c6f00d7ce315ff53a19aeb4d9b5cb4482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165905 Malicious code in shilang-poke82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce2270f4e3f41a27f0295b41c749675d1b090756089a41c1a97a00811efc0afd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164977 Malicious code in rival-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 724d3c05c865b5ab3b5d9a8ffa6818b60f8746a4c5993026670a7e372348769c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154178 Malicious code in dajouka-reta-tac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9ed8241b5d9e5aa96f02af1ae354f15e04c2c311976c9f48236de8c7477d537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170536 Malicious code in wulan-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a07a6df67cf18a4f8d90c1d979440c2afd50fe81f208dc212b4ef325d81cc48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...