MAL-2025-151894 Malicious code in aiboa-molpe-asimsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cd64539174bb2d5f38a816bc6447eab2c2003ca005b0ccc3592cfda9f11760f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152288 Malicious code in alfiansyah-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c5d3d3061b27e3d23820975fd4d7a80de8e122e5c03d3533726169445666b9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166349 Malicious code in sunden-dilak-nulikanuin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b46601cb35f96b6bdcfcc8b5804a4c21ce066e997841f1962935c4513ff231f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161017 Malicious code in musasiak-naik-gunu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9899e758b52711983edcf23cc0abd8d663a71a05f2e3a3e05c34f1085e2dd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150194 Malicious code in @mipta1/rzaedcx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a42f01e2e35b99914181f526670ec5a1ded384a3b15c4e3d7e0c6ee80dec694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165147 Malicious code in riyanto-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 199ef657d1a64886457d29f755f4d68de662bb665641b13742ea531693256b5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164605 Malicious code in ramadan-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff11270ff8c6e628dc70950d95e6e0b7b02d67185b45fef7c16426905b5fbccb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155585 Malicious code in hafiz-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e3027de3dce0147bac79cc7e4ca1318e9413ce52a5d28be675de8acca1ae7e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162120 Malicious code in nokire-abimanyu10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 785bc123f913eb1447fdf1790de58883524c356b3d326c107b9056c777cf885d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157655 Malicious code in keyla-poke83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50da9d3f5ba3179a4bf3bf0b81bb4fa7e889355e4a92d36eaa0df0deb6a5070d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166586 Malicious code in syahlan-poke82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7955a5c1778386e8418610fb7ee34d208c21ec31bef4cd2ab5ede94fd843339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164856 Malicious code in rinto-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1afaa60aba7109177bf537aa16181f9d49f0fef449318e7b70e2b9d55cb638c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164761 Malicious code in rinto-poke108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ad1942dd6eb446697cf571a0edd13fb6f72dcd180de6779cdc4e7e33b33a10e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161466 Malicious code in nabuf-otimmn-pig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c24b5bed1dd7a2eb120de0c8fa47c2a56cf41d113ee91d2caec8781176397730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159275 Malicious code in makani-aioba-ufiyvaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8af9ac507b5a3980e58268ad44db59ebb1475aaeb6abad02ea93ffefe938c477 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168535 Malicious code in tealove-nice9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bdbcce642f1d49aa8238cbc1a330161d49a6d2b94578a9db79a0e90c290f734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163860 Malicious code in nuilava-dakadre-nffamhaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77952073099765a21065e5187fa99418b81568f74c2eae0e7f56e64af784618b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154438 Malicious code in diago-klp-kaloubsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da0bfa0bf995441b34b416149d22d233db6a2eaec7411984d50075affb526398 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150139 Malicious code in @mipta1/mihfcs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65053a0ea57286c8f16ceb1a00ffe1f36b9b99431504fd2907618ec33e33ec28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165003 Malicious code in rival-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63134ba9e3325a7055899f2eeccbe34daf73bff1bb3963d474c9b3fc1fda5fe9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...