MAL-2025-155906 Malicious code in ican-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64ed1992ff41213ad63b856306289da75b4aae10905cdfe53416ad3de3717af1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164198 Malicious code in pilka-luniu-kani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97c7c6cefe4058ea00da7f03fb570cfe58b6aa422b7d19d26dbfb5cee3789abc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168307 Malicious code in tealove-darknest49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 471065f8110926fd11154815cfa7f61689b4ca62e9c574d44fe3d80b098f1475 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149908 Malicious code in @miftaikyy/nitrogud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee15e3a4a241dced2621b3bec7234d929785b86e66faf01c12dc09e6e57c52ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152118 Malicious code in aji-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 221e8034b6b9ce2ada503834366af387c756033e5b75007add70242793f26a67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158305 Malicious code in lookingan-konami44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c840145a5e16f2146eaceb7e7b81ab6ca65722a404126dacf6b2f3e20f7b23c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150272 Malicious code in @mipta1/tijx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c846eb1a6cd42695a312dce898cf1cf1c215f9796ad5fceac54511592cdc6c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169481 Malicious code in uaragia-mudahai-syuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b9fa3d1d3349030d54f2d9ac59c5ac07926cdeab66d0cfd538acc80c9b8aec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154414 Malicious code in diago-kamuli-lukakimavuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3777710bc15d25dc22005b8ee869feed0024c89be45baddbcbcd6b911d7e41c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163859 Malicious code in nuilava-dakadfre-nffamhaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22d57d05a14f407715d714ae12fb22889cba28f2dc3d5f69af89fceb91ced4b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153547 Malicious code in avomainah-frasu-ofru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3a230c0ee64f5687aff6f520124e2170425e74ec30785be2713bc4ebf0e051e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152075 Malicious code in aji-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da2e80a533b67b712672e6985391aa383cc0541f1faf41fedec2fe5784144162 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166123 Malicious code in suharta-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dfd00595d33fab3f5b4e378f68d6874503b9f9ef2731bf51ae470ec7f9a7497 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161926 Malicious code in nasrul-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f27c0ec1266ad04bf94a857123d400c30fa6aa5c2c4365c67cbe7de31da1351a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166875 Malicious code in teagood-lokika13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73bf0faf5548296e8cbeeb9a9b6db18166c9746f92777c060fea9953c8b06f2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168573 Malicious code in tealove-nokire44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0796c76b3c4bf5085f82b3d9e219c88e0a30a54b50390e9d6b5ea6fb115d78d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154860 Malicious code in fadila-poke126 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97ab8cabfb1f73170b54ac866938b25b53359e1a2557e5c92bd7b38d82435c05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166365 Malicious code in sunden-udik-vaklikau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d53230477e9fdd7c6d1b9c00b5671c8b6af80d95ebf8656afc4ad8407eb9b83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152715 Malicious code in arif-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ee57746a3c389371f9ca2364f6fcf5cf7cc24daea3600689e4683a5e90e078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169411 Malicious code in tusya-fass-ssa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0410e5309c33ed4b4e03dbeb718e4d1458f878aa169cf6f0221bc017d824b69a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...