MAL-2025-157010 Malicious code in jeep-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df692b5b8bd660001b29b8b806c589375a802da13544c884006f51eb3b1f8e3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170528 Malicious code in verify-ticul-biuyaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 988eb6ad7547010b0b23fdccaa7efea28fd9ae78e07e3dbb97557fdfb8532199 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161949 Malicious code in nasrul-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2550a59edae6a3ca707fc8d7861d4f59ff540405810a8801d86a788c4284b303 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156379 Malicious code in inal-poke106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a592e7a7df85659bbe14f6cb8d22e3b130ecdab71bb323bb792b442782c8bb99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158221 Malicious code in lintang-tea6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af2042eb61ee7aa02bbd3ebe078213ee770defaca5a57f73457be7d7c195bb4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168532 Malicious code in tealove-nice6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb48aa5448e6c3fbf709d96eaee719fe9e5dbddfe56c1dc3347152c347c12123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151117 Malicious code in abeh-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e7ec35bbbdafae3b125ea464ca57c960e8c21d48d128d25871abdc6c803b55a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152696 Malicious code in angin-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce3eda1883eb31ac7965b3fdf3061fd3a854eab8c89b5b399af5b8c28429c803 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169877 Malicious code in uinsu-losiat-dinsaivu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96265d6b8cee6aa25274e9389a1c95d09b0736ea1dbff2ed3085c9c6e85d51d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169794 Malicious code in uinsnu-lumi-kunal1akab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73f3f145e79a7f4846bee73bf48116cb13ae17cd957988db4810ea4e4f997e26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163960 Malicious code in parwo-poke101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d1a45cf8ae3a4446100017d20255014061c46fadf17b3f850dceafc622b846 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153918 Malicious code in bufani-muyu-bafaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90a4a5e93358334862f0c4b69d0365c80f204a19f3b69aa2e93a11f0739f31cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150403 Malicious code in @mipta19/pjusr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c91319c4ffe4e8f2158cdade5b0b9b8b82686117cff95fc1f4131286d2aa586a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158034 Malicious code in layla-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 013766ca5c7b865b8505d7a60e00c5bc2e412458642c74bf6b0e6c13cfd3a8a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152562 Malicious code in alvito-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe79ca8f30b17b7954bd1244b97d5c0ebf8018ef56c8799d33ca5557e5aee35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167377 Malicious code in teagood-nalikami105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ad400fba65ead20ac25daddc8b7e833ebd1e41f78b5d11b3036123730ade1c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150981 Malicious code in @miptaa02/tkd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f856e445190708cff843a58301b7407a401aeccf5b5f96caf8676f81c3ff0d7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153966 Malicious code in bufpani-muisyau-fanmfmufiafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6da84ee3786ee41e65ea1c3e077572f32b62e2a314d0914ba6966cf6aef68e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155605 Malicious code in hafiz-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c4f7f89517f8a744bbb82594d554d248e9580227f49b2fa02003e73766ac3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165569 Malicious code in sabuvauakli-nalaui-lubisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab7c69fae7886cc446e6c8900449c0f6315c3b4e1bf105b802a2cb8208cf58db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...