MAL-2025-165018 Malicious code in rival-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16820e333b8941ae3eb9123610e4b6c3c03c915fb73fc87492cecda16219c027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153284 Malicious code in avminh-afaais-fbigufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4a40e734ff1f0dfe48ac59232389ff6dd351499550ae85c1fcb90e70b6bee00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164891 Malicious code in rita-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f298812b8fd1eadca820804d56357ba5f739476373ead16c6d38de114027b861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155263 Malicious code in flight-dangers-fantm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8845c55a0327f49866719370dbbdef425345117fb85a3cd105417359792df8d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158100 Malicious code in lina-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7ba20fb8b88216d4abbc5d2c06e19048f9a45218aefcddb1a8f933143769f42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170275 Malicious code in verify-aikun-miaaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 398973ea0ca70812f4077b5cf805843f9f2c7162a7a19a122bb238be162da60e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153932 Malicious code in bufpani-mau-nafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7f9093acd69ce033eb9eddff6cac03278811f3ee406fa4132c5cd54be380210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161961 Malicious code in nasrul-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7199cd4863b25096219cf8ba373cd18deb1274fd6e1ad8ccf1e6daa51397c399 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164605 Malicious code in ramadan-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff11270ff8c6e628dc70950d95e6e0b7b02d67185b45fef7c16426905b5fbccb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166091 Malicious code in slamet-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f77c49c2e1f6e476e0a235d82c12a4928de9cc756baf9b9b2af64905e3770ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168127 Malicious code in tealove-boy21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 463cf0dcce38bb987b5504ba4de185241544eae58b7452282f08194a2a8343d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168015 Malicious code in teagood-yakuza56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3e0c117e987a0cda082c6e9a2fbe7ec6887653eccd0bc1e1ea436a6807f1757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157779 Malicious code in kuinsu-lukoi-natibab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc5804b0dea4c610b4b59c9ab807986f3eae8cde8531cd725d7ea2d78dc21518 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154667 Malicious code in dioago-kamkoi-alasiasaokulima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80f69db9abc133a9dcab7b3690000b7745dbec5620a4e69f8749b257b6c3f7eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155021 Malicious code in fatidra-nutayua-tufadai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93b34bef72c22ed8cadbb1651ec2040ce150303c9211514ecc4687b801f697c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166021 Malicious code in slamet-poke117 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51fcf78adc96f67b9cce48e4271b96b01b8406fe23c32072458d4609feb602bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159521 Malicious code in manaf-manta-nurtasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304ca8e1df37a438f177600cdb79ad827757e13146019fbf3ebbdc5dcdf93fe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162082 Malicious code in nokiragne-afgafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4259529ea9530518eac8d590473b8cda6ccc8a66637bf98495f94498a9238740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169329 Malicious code in trevora-mmiisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c38bf2723ea28c939496f4dee14aef7c7067331af00ba789ad15a7c890b314cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150434 Malicious code in @mipta19/sceh-1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef6f2d73223b08c4444fca5c6a80717fc55cb128efd7a2829c7925f456c1cf20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...