MAL-2025-157648 Malicious code in keyla-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76c827ebfff9b2763377670a3ded0f1745e11a61da55a4cab827bb1830dbafe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154910 Malicious code in fadila-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76ab3b9a9186bedbd76a8323e4c13502c46976b97e799d3f5e9636f812692857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168363 Malicious code in tealove-lady9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24a697f5e24a601c1ceafe793e0d2dc1727b14d2477781f56aef897d1596e2ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152297 Malicious code in alfiansyah-poke83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bfe3d59a8c33afb596cb493906c9d99217a93bf822633695a03b3206e555496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166716 Malicious code in teaa-reborn19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e6b7c9758059ffa9033943884af92da3f5b2026494491dc2848410aa5d0e885 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164915 Malicious code in rita-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42a69757c95771d2544f7276b13464e1c46b3d88183ff2bfcead6cfa68b6958d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170476 Malicious code in verify-taic-alusakiu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92cc92d04200d2cddc5158faf5aa4dff8003797a7d04a300d85b55b585b36ad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164905 Malicious code in rita-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 995a4fb627d4f8d0d281a75da404836f9af4b45c3ea06e8dafefbc6404bf9b77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169168 Malicious code in trevora-cir115 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16fd502da3b5069623d87ec6e390fd796beb8185ecd365496aac0b5ad2e97912 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156574 Malicious code in intan-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd2f9857f9f6ca01ce21dd828e0477acf8af667d8f3b7c50dbbde80e9c0baeed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150293 Malicious code in @mipta1/tyua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d313664b07ab718c4effe676ae862a48f5f52d93e8cb2a4893155bfca998a087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163919 Malicious code in nutr-madan-syahmud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dffa7f9a191887d4069b7670f51e376e8f3245b84e8751335f7ee8f604513141 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170030 Malicious code in uinsu-loti-nalasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b82c2e7cd235b37c1fa0ece461a6518fea5003209fd4b65b099c57c4a6dffa55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155220 Malicious code in fitrok-poke51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe48bfe776737723952884adbbabbb300423082624da44742278dc8783296cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157809 Malicious code in kuinsu-uiu-vinalimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22b389759810716cf65f400936fa538df7f3139ef6d65cd6eb35e3b9b3db9bdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163441 Malicious code in nokire-sekiya50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67990b2c7a930ee99cbf37aae25dcb9b3c43f9937af337fea558a481a78af5f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155447 Malicious code in guras-nutra-nutapasap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1c4b4901a9614c8eff97fb9a6aea7f5b145af30ff4f6b2befc2c4b88e2a2ac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165415 Malicious code in sabua-muuyfafu-dafufufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5722c1f2beb993ca64b3c938a28d65d94cdd9d06d51398c6c521e81c9ca60a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04ad68deace170dd60dcb832ddbdb2c2f900843b92366443cabdad22ce996af8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 618d0957b3fe4118acb2fd6f032d0516045ddff80459b43d36eefa82d67b0b82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...