MAL-2025-152029 Malicious code in air-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b70902ef95f5216486736aaedc05d335c6ae9f52f81729832bfea6e21b99af31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165772 Malicious code in sau-naki-iyuulaap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f93e5c3644cf00f5e9cd1960674987f56d0807eb41ee04be71e29c5dfc150a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152610 Malicious code in anaislah-pafkai-as9ia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d493a0081b2355fca411bc8c497157a45164a13051994f6da536a599de7e4ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159216 Malicious code in makan-aiuga-ufahfayo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 837423ba641cf44dc629e8615f043e82a829b7c263813f8d905da8ddd4cece8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164491 Malicious code in polymeria-butofyias (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76c2dd8bfc8e532fde127ab4ce3aa408b3a3136391e4af72d240385299ce04f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163850 Malicious code in nudla-ofogi-agua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbde3deb769de68c85daf53f6a7f3130e27199de0549c19fa23b83af4d654f78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150100 Malicious code in @mipta1/kofdads (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aea8377221196971ec5504f744dcfa8b4bcb6dd7b85b9378ba091f6824003723 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168873 Malicious code in technical-aln-tol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5759f568637846fb05a3b8d702502aabc855ddac1101c2bede7c249fa19d4a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158629 Malicious code in lookingan-namakita20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09ec2fbb7f0a3a9e6732d743dffc9656ce2d83f969544bcd1687c50dcc58127d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161781 Malicious code in namadata-munaroha-nagamfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a48dab7e677afcddae1908835d8222f2a51214537edebca67f0146c24fc1f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153812 Malicious code in bitha-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d22490aea5eaeded2701dca2431291f052c34aeeb91d0b91c0eead4031a0bd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166111 Malicious code in slamet-poke89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9b79ffee1a798350830767c3205bcc581c398abb2207100afec57e9c6f95ee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166994 Malicious code in teagood-lokina30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83873d26b28c17ab5faf8c024548a7c3365d9641ffb2d0cf5fb2ab9d7a199a01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153600 Malicious code in avomainah-fruh-fada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcfbc626b7057b2161918fc8ab451d5ded9d456149e49e48f9c592b4fc8e3234 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154701 Malicious code in dioalgo-kil-akio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b3c300d45577f1b8419451de9a2a54e99e53a71ce5a8d6f31977aca189cb30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159823 Malicious code in mansila-tiala-maani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0129035fbb07ca800b2a89cb21815a3d5de9e2e9a33a1f6d2e4a9f80aab90fa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169240 Malicious code in trevora-cir45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2179988984290601da35bde1fd65f8b008e44e65eae4950123707cd50f1f6b7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159555 Malicious code in manaf-yuki-mansua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f8bc1aba7b02ecb8ff0d98b7f431436a603062dacc156922ac4d8cdae1a7fe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169051 Malicious code in tehah-nuyadt-mantan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e711253d9dce68f2c32cd02c1ad57c27d764ac3b38abaabf08835f84ae3f30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152554 Malicious code in alvito-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d739d0582bc3d85f3f27b37097c41722be372e03a275098de79cd7f35b76a427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...