MAL-2025-152263 Malicious code in alfiansyah-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c985a303f1849c0a9c6dda9101ce5c221321fe5dc443f1c09c161020c97bfd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169837 Malicious code in uinsu-lisa-atuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb4fa8286024d5a1b1eb919dc7a19985a4793b3da907f858fadaf4233281d30c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170283 Malicious code in verify-aikun-misiuka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a268e360cbd2d875bc227f43b18896d40d6fabe83f2e418b7086f6fcc332967 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164723 Malicious code in rino-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32074d1d9b7f5d170a5576dc4d1b26d3b5a96d3a0fae34bc1619fd0f9ad83073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154681 Malicious code in dioago-kamo-alauliaahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a272aa679c77568b1c4a0328619abb368c38a5744d6b0cd34438b07f7edf8bef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160359 Malicious code in messi-tudsassd-usidhfna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7d78eb4b50b85ee4a4dc2fc304c426343adb1e1d6f736f7b79132fabac3b8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166041 Malicious code in slamet-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ec9e1b8bd33a5a021f8330597be749e6c9f4933c99c46a96dea8a06332e63eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163543 Malicious code in nokire-zabuza52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adad3fa2f33a028abc3181d7e92af7eb512235251ae33debc624453ad6d3de5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161539 Malicious code in nabuf-otmbian-ifoabogof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c6c26e84c11854b919a5f322cf678d3eae8554dc658f32b60b9fc717010bc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156604 Malicious code in inufgi-goa-jamufga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10bb590c7f56d95424775199c598f481d957c2bd69e7456982aba808ec0ba832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150379 Malicious code in @mipta19/gupusr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac2f12e176a31c9808dc051dfbb50e93f704d4bf0930207677cfa064951d1881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152360 Malicious code in alita-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38b6f3646f839ee440e91346aa3532d34c8881c7f44c8ecb23b07572267b08c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162296 Malicious code in nokire-akaza8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee413d710ef8ff5841eef722d857d42a482f118a7149aafbc86392cc00e0a44c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150792 Malicious code in @miptaa02/kkbd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83ff679004bf780cb290f83a35d128023e14f66c8bde405f67865d7436937536 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168156 Malicious code in tealove-boy48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86906230cee14a2135df51d8145942cc589ed3a10a3352494b8e18a2e481a47c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151317 Malicious code in abih-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe2314da1fa11f4c55e686e2e7f548143c8b2c30ee8f8d87faff94f061de0f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153123 Malicious code in avminah-fagias-infgafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c5cb3649236c5c49767b2d0a2e7f76bd0b2a77e7b7e364a7250ae83144a88b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166398 Malicious code in sunderan-udk-vakaali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0056b752989377de0257ad0d41ae5455c34aa3a1de412412a801cc45cfcdf950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160599 Malicious code in modirai-fia-jssu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a58666a616f7bdf99757bae87b241b7c6b83c97871ddea0e476f84e530c300c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162336 Malicious code in nokire-arhani25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c61d310d2d65ea8ce9a8d629eafc132b20137d5230bbe7ed2c07e4bea1eccee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...