MAL-2025-152579 Malicious code in alvito-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8805e3bafd074f822613e8c964c0918b538efc935134e6222fc989ff33409e7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157020 Malicious code in jeep-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c62a0264846e000479c61b69cd70e02c1e94da7c8eea99d5cc726ec5b1b30924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166199 Malicious code in suharta-poke68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c43ac9e08eebc052d7db4653f39d284f06bf8321da71a443fbd59b44fbb09a24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165060 Malicious code in rival-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfb3e042d2f698a4635449c16d4100797e45437e948bdc15db062d7e4808ce18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158105 Malicious code in lina-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa29552954c3331faaedc4484d79275d9e4d74b4d21fb871af1deb074c660e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152566 Malicious code in alvito-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3bfd6e64b483aa47133e48cb9e32d95b36b860df07683bd15613b5b5f2cee4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169849 Malicious code in uinsu-list-ptl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba38ef64ea5658e1260045dc8311cd4459556ae0937839f5267684fafa2b4e68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155702 Malicious code in hariyono-94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 066b2e53a667688f85eb2b439a8815f37ec3d3401b0339ffb91b834a31e6db65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150280 Malicious code in @mipta1/tsezdzar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f00328d0898b516e7283207dedc2993f1703d1baf557f888fecad713027b3210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154381 Malicious code in diago-kamoi-liumakuakoiamoho (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ef7396984f91a6a740cf2933deb6bb97c01e8a6fbfdad09a8187405a1eaba08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170090 Malicious code in upa-lubalauvalio-igsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fa0bdc8af247ac15cbdd27e05dd1902061d20b91114b1d79de857eaab97d982 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158851 Malicious code in lookingan-namalaka4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f572ae1c4aeb9406432f59b2a659f48bf8406e2dfbc3aa2e7f0dd5e2f8edf4ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163510 Malicious code in nokire-zabuza22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbff08d4c51846d3d4820ce3289b6edc9cde697a0f5664364357f0f9b76233f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170402 Malicious code in verify-ayica-amuinadbha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d2bcfd8622d4225c5fbc3d0cec73a640c8fb283bbc8e97439a79411eb5f040d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163823 Malicious code in nudela-rahaf0fafuheg-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c33913d4d5409e479fc98563fef3f5449e4dbcb0c376fc1fef7da271f822bbdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155204 Malicious code in fitrok-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1fa211b3394c3f2e2c733a3412d88468bbc8bd746a2bbe06e69bdcefa69f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157115 Malicious code in juris-fras-dgrs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41e48d4f5c7a745daac2c33bb049a5f32539ca1090439cce5bdf1390cda30dbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160346 Malicious code in messi-tuas-butsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7ed72febd937bbb2fbf312107fef0ebea8dd2b4ac725692ca01d1b81f59e356 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157591 Malicious code in keyla-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb6f92a4574032a806eac2ca4638b7c550d4e527d4ddfadc316dae818c1269e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167125 Malicious code in teagood-manaki58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8314735baf3bed147ac69440d5cf31cac0aabd9c2e91666c5d78dd617025d0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...