MAL-2025-155885 Malicious code in ican-poke109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eff0d744a6f0c8b44ba0e565012e46b642073b3f6b1af60f84f19665803f9eb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166512 Malicious code in syahlan-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b7ee50f2c62e50a565aebe66dd3d974f4e6e894e9cc973e33a624513b91c4b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152053 Malicious code in aji-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a87f194644eafe52daf05b785fa52c388621725c63b7a06751ba138a5584550e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166888 Malicious code in teagood-lokika25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d69fa09eb6e69aed15c39f21b4d9faafe16b25e087749eac3f98da05049ab7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150817 Malicious code in @miptaa02/masra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf9713b77d634ae518af0abfaeb70feb8699786765556ea46771676ed815cb89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165128 Malicious code in riyanto-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccf30b97135b10b0f6702bb288e356e855be1df2f14c4b3e8c40a1aa46449d44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161249 Malicious code in nabila-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5482a3d238e44a1d08041999adca7a8045b25f565c5aa8dae2b31e211f324d70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164061 Malicious code in parwo-poke85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19113d261f6449cce929624357f567f6b496112f4842721b24b898aad3ca0946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153152 Malicious code in avminah-fagis-foyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d31242a47f2f85ddd0f8adab209f9a39aa19515ebbc600b2295903d8ad111d71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154438 Malicious code in diago-klp-kaloubsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da0bfa0bf995441b34b416149d22d233db6a2eaec7411984d50075affb526398 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159824 Malicious code in mansila-tiala-magolani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 979d1a17917e0c2abe113b68a775bdb19a761cd71fb5ba4b7e9031fc13b28c01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154737 Malicious code in dioalgo-kloip-kalobkasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4156159cb55f7cf136e47d389b5fcca8a0edd04105eb2bd5139ebbf0b717892 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152533 Malicious code in alvito-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ec50e4fd9b23448dec04bd3a2ca00191dd21a48ab527108b004dca21be548bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154414 Malicious code in diago-kamuli-lukakimavuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3777710bc15d25dc22005b8ee869feed0024c89be45baddbcbcd6b911d7e41c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163114 Malicious code in nokire-namiresan6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77a216173aed903a297aa065529f78e2c4e259e9f69e3addc5bcc6baa33dae8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157381 Malicious code in kamasada-nuyata-bunaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532e224e0d5830e7bd70352079ef22d14cc447706dc4dbba6caa2430dface02c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161544 Malicious code in nabuf-otmbian-nuyafidistad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1007c6e7f5b3c635acb0d0e0748868cba21f57afbac7806b8ab7c5b3e9d652a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157817 Malicious code in kuinsu-uki-vilakamnaubimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66aa808858fb4481ab67d0dd1d29acd61ccd5f39bcdc0bf449be455cd08617dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153637 Malicious code in azhar-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f208ea0a5d1e2f867a87f7c3770a08f266e5cad87c0a3cefe2628d7e8e10f440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160322 Malicious code in messi-ftfa-usina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42decc5bb1a06ad5af93c40e80fc4233e97c3f2f8f7c7ff3c22be26abeee6aba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...