MAL-2025-151521 Malicious code in abu-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaf8b49d2c0dc850da918d4065a22b056a98df7904a0d867ef73d09ecc43bb60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150118 Malicious code in @mipta1/mds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8865cf4804a195797b48e5ff6bd8f4831d028de3e4847a96270f51dce87a77b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154682 Malicious code in dioago-kamo-alauliaahki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9535acb93268ddb7e5d9e13a1cac9baf2ea73b129343b988693813b19a11107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152842 Malicious code in aril-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4909e97a9b2ffb1fcfaaea7df09c6f7df2278e1b199278fc5d7ac88241cec4c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169263 Malicious code in trevora-cir66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fad249cce146fae720ef61fb9b484ed0454942404225bea559e06172e4c37ac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154907 Malicious code in fadila-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49183638ce53476d9b33281f29db51446c1849cd3ce18cadf2f7e4948045fee8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165206 Malicious code in riyanto-poke93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5091b13c35e5a5519e42810c212c2780930a6a61c0694f411d016512b3214a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150538 Malicious code in @miptaa02/awe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a16663d3f976bbabe88bb9b2478da3323d1869dc111a802aabdf12b276df93f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162351 Malicious code in nokire-arhani39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c2dc53c179e06b023a91787b14c137adfd590661c7d84fc15f2425bccd88552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165626 Malicious code in saku-aimaku-umuialakoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35343a7b07aa70589fc1467589d11747a65f272af600d2026ed24ef8a6f75de1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160855 Malicious code in mundya-misptasa-riad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c884a939adf86ee837e37bc07ab3ef9d4b159b275d0a44ad96899860fdbacd94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152678 Malicious code in angin-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ad9bcc7b8997b5ada30e2534f9d0d8b225bf48973d50d16d17de4a60671d89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152436 Malicious code in alvino-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac02f9578576bc0d6bec2a702d6ff4cd4138add3b18575904ef4702beeabc12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154834 Malicious code in fadila-poke102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e2079d6201e8356a4f88cca2a80b79cf34dffdfb05f39a6cab4b9fcbbbeb1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164820 Malicious code in rinto-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969e89ff005f29382e067e1b1b6e421ca48dd579f9fd0348a5d0b7b6b12898b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152007 Malicious code in air-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b0ff94da847e2f0638984c15fa443b25104d21a1614303d4a94136e17167cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165131 Malicious code in riyanto-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65b62189aae1c054efbe58357e44570e281ee0acff1f16b1aa9aec72c7e66046 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166995 Malicious code in teagood-lokina31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38c0b23e0156bd13ec223b4afae7590289e2185ae356a3d1a5b9ed9ec371b01b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157138 Malicious code in jurss-asdf-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06e5a4755d374a0f996b159849e7bd714851327bd914bf35ddd0420eb3cba1c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157596 Malicious code in keyla-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a217210be717482b886905fc3c1d6c7408ffc490a725286f9f3b082faa30309d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...