MAL-2025-152317 Malicious code in alita-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd7e5c10cd066a51eaa6f8d8150b095792f4bfa8ad1b7f8ec72bfcc1b3e4176d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164070 Malicious code in parwo-poke93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9007a12da2d0ab2f5a604c6eede1ddc125a954c03c51a895e10ce2f3b8832f67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165181 Malicious code in riyanto-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7bb35e04718541b0b53ae83cff506371c8f8f147666740967b6b1f3166715e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150402 Malicious code in @mipta19/pjsr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ea602958473dda077c635ffea20ccee84352755f8ee0c914abe99d64e3c413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168676 Malicious code in tealove-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49840028bc9ebd431bafb77ad6372a41dbf634be322cde608f7e78ab4651bdac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157682 Malicious code in kuinsnu-lki-kagbdsasoasddgdgdumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ab530a028e928e066eca36fbc41dbb221a098806514f5d12994aee0b2ac454d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158029 Malicious code in layla-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9b77aa4a33628584835a3bcc81d1363ba058f86f7f5e22fde0c6e3754fdffee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159090 Malicious code in mahnud-nofty-goga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cbe5bbe31807ef5ba1564b5b43df319176c0f78f8d47b5c67999d019b49110d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167710 Malicious code in teagood-namakai54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1e5fd36bedde666e73f1999fc68a0b664832b0ba1ec427013cf942294f9fe4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164021 Malicious code in parwo-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 572eb374238e74656a8732166bd504023e3463303dd3f8e62ef7b2b151eeefb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d842f7c5cacaa25ac2b9659c7fbc462256c533f25c24d8392ce88d9f7820d966 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mand-nofoayiaff-mutunau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 134aa5f45649fb1c8f1b3babefe9c2ef7a37840b299fd60d5b8ac5e92e9a6f86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a031881875245b986adaf427555c4ca9949ec2249387e675d3f6d906627788b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e9d2425937fb74c382f1be834a8cf00657a063ca11dc1ae0372d93ca02c624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158259 Malicious code in lintang-tea94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 875a843aec7d7ec649b42413fe6c083667b142fad78ab3fc01a7066e4494793f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158250 Malicious code in lintang-tea86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 024304dbac6c5f6b4f7e5bf350d35e0acb377af4c438ef77c91afd59a19b2eac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169046 Malicious code in tehah-nuya-bauyaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34347068825a9031d4575332a58d19a0da1c95755e3d85b2393b8ecbc62abf0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169240 Malicious code in trevora-cir45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2179988984290601da35bde1fd65f8b008e44e65eae4950123707cd50f1f6b7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170548 Malicious code in wulan-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32928c7a63337004d0ec01f604f6c7451ea7931ab9bdf9d1f9c3313735321383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee0243d094c2a1acbe61e67dee6d0d467bb4c639cd7994b287241fd70c433c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...