MAL-2025-157097 Malicious code in jimmy-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8691dcec0302aa626cc96de7635ecf4d32b2642af41ad39317c4d64c245172c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155553 Malicious code in gurs-nurazssa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0755738e42217653dfb9bfc9587e07c31837775e3f991e176b69f3d9faa70c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163520 Malicious code in nokire-zabuza31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d982f32abc3c08d8a3d4bda7bb31d6a8a6570ad33715e005a92adde77f6a14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159727 Malicious code in mansd-nomafdi-munau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e40d7cb9624468bba074acd5c531b4bbee24435466fd2159d00629e1901566da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152124 Malicious code in aji-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcdec47942174cf618e9d97263be9af576d44a92c96a39fd0e21c7cfcc2dd184 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158072 Malicious code in layla-poke83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32971ef1d4a75dcec2c794549e25318a87b1c16d8faa87979a832f309558de72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167184 Malicious code in teagood-nakama20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4336633a9609eccaff4299ffeb1f5d4b03f96a5971a297c9701984f86d065a4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160668 Malicious code in modirai-igno-jianamgugu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b597cbb60088ecf52427e30e22f189692ac46790fc5ac75cffc36237c35f7be9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166425 Malicious code in sunderlan-ud-vamukuaaiabaupalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0a56839a084873012b870f267ea643e39f58af630f8623019293fd6729e8c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162290 Malicious code in nokire-akaza74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace68dd817557864a09feea7001e0f7db23a1bd5d888a3e221064eec55188b16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153880 Malicious code in bitha-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae3f124fc5d45699f8c17e05ce23a37b01f47864ecd931fcccb2cf68fd28343c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162276 Malicious code in nokire-akaza61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fa5153cf5a5d83484d3ebab2fc98821a00977c7dc4f80fb6207a8c6b6052cc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168369 Malicious code in tealove-naiman30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c12cb666c40dc9fba7c0ddb5967b34cb35526a003b09d5ef60255dac552c33c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153575 Malicious code in avomainah-frauhuu-fada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef72eabb10a2ea5d82a29379a5914676149130b7d0a421a415b5eabd44d8789b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152171 Malicious code in akanabi-abila-aimava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bb0505b9d2f33bb61a086bc403571b92d5da1948c1cb19259106733373b4628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157640 Malicious code in keyla-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f7f8e71bb6d9f563df1e4790ea3e2ee5133bfe5c4b4be3b235141675aef35a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168650 Malicious code in tealove-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 259a0ddc49f8d8b4a466a3f1e52b3067c3a107b1db67e548351caa308c959b7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150865 Malicious code in @miptaa02/npd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2865ed7848888ce2586cf2eca90818b89339dbfd6ce48f862fb184afd825c365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165983 Malicious code in siregar-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ad48745449c42b148f5c962f319e4b4b70928879fa1a5c594a7372aa2d9586c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154456 Malicious code in diago-kuli-luokkai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce243d8daf5c048b8ccd870ca05ef68f887ff16aeadee391d0ddab2172b13acb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...