MAL-2025-164055 Malicious code in parwo-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bb8dd1d214948ab67d8c84bbc8b25083de5ffa0468e4422402ac0181bcac9f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168182 Malicious code in tealove-coki26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3c074c8e732ba18967f68d39e237d810977fef96de1eedbdee749dfef1bc19d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167967 Malicious code in teagood-yakuza11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51eb4f6cb2a6450bcd53fd6af119c531c4ce2db7b5392238ca3a6bbc7ffed416 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164449 Malicious code in polymer-indtffsi-addutfdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 210d098e52363c8ed7495003de4048011b37e59f13a8b86ece48eedc16e6dbc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167051 Malicious code in teagood-lokina82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c627af25a02d771be667a7c38a9e6e0579bf6b9c6ab941246aca608a6df615aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168363 Malicious code in tealove-lady9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24a697f5e24a601c1ceafe793e0d2dc1727b14d2477781f56aef897d1596e2ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152136 Malicious code in akabia-alifi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 464ea19b5d84eb0c0b6c0fea4bbbb03f52c4fe6b5c45e041de6eaa5806f945ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158784 Malicious code in lookingan-namala7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 212a455605ce7288b41a0322fc760fdfa0b40dd1d9f5f059ff301f81d25f004e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162355 Malicious code in nokire-arhani42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 741e808258e6fb4e1db5b59186967dc60adebd268f1499c9ee2bcb612be7d90e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/tddx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adb5ed913977384f10198da258881474f4dbcbd6d2d244d015447b37ff6f497e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159607 Malicious code in manda-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0950380f549807d5b53b4c3bcffbb23484b9cc813cfe917cf3742a97021a3bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149936 Malicious code in @mipta1/asaix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d9e2e96dcba3be0618b9d5209c8c9bf8a9c251a4943422f799a63ec0da8a37f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaa-reborn38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2758aba44f676a165a9fc041a44db6156fe7866f16c137555a9cf2a22ca7a75d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155765 Malicious code in hariyono-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a8c7ca8898bfe322ab2e524a56ea0b83582daf280930777c8324e0ba24df095 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156194 Malicious code in ilal-poke87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d27d810f44f3b8aa916c7accaab625cf10fc89fd5efaa5d16666fb3c9db2cd21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150200 Malicious code in @mipta1/saf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d67272413d287ef572b14e89a59ea0951e2b7b0fbb6a6ae278cff477e3a91806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomin-nosdfaju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2580bd3f4a5005f22d6990e28b0b42ed3dd33a2c76a91b93a285243ce0d6efc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165146 Malicious code in riyanto-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 976accd1a048d9305fcc3e63a55b5f44257a19f18d44d52026a5b7c46ad62f65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d189ad2c1031f939cce7f45d033a9a439ce718cadeac2ea0c3a0328d3d7a303 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/yaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c09866bdfa45e78a9c24137e4f1b5e6b9f19886621df8e960d735881b5d79fba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...