MAL-2025-156845 Malicious code in iqbal-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8397f26692559096b250ddea47fd42b7fefc3da132828823ae99b140a340960f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170180 Malicious code in uyafru-tuft-darautut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920c539f07fea53c01d89fabfa3f56be88efca0032673f02a9d29c92c498d27d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152279 Malicious code in alfiansyah-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84e4ba7aec9c9052d1fa9857548b7d1900d3da44b3c6d1b191554e6aa0d0538f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166790 Malicious code in teagood-cuekin26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14e3e8ce45a4762e395c6b6942148a7f43b76585ca2861864c7b7a364323f137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156893 Malicious code in irashi-2aaswfsaa-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b46e1d48f2f4c061bff0c52b2a04cb3de4726c30858d12ef30e36c7e5e6caf47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154500 Malicious code in diago-kulp-kaboloki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10081f12a3739b7ef59fea47217f68dc3469266d228809c6d7847bb0f1bb9d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155308 Malicious code in gifa-otatu-umootari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1129a5545363ed7e853495a61f03f95b5adb77803ac625a2ad4076dc74093d2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152096 Malicious code in aji-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e902a78478189b2c86ab5d4771c69807393938cb0e9cfd814da89336556ea941 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164814 Malicious code in rinto-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aab88650193791cfc96f7472af40068d70d17c529e3b336e1c4d0790e93afe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153107 Malicious code in avminah-fagias-fimokafiguaogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d25fbb53367aea05f945c8362690a8f76afb532084037cd047c21b1da13d0de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162843 Malicious code in nokire-lokcek85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd34fd2d7a63a65528978cbd3f3860db467302a0359b38267908c3a2cc8a0fba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167128 Malicious code in teagood-manaki60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2732b8d8e43e75ce4c341e8b99165b948969a570e1e3f650d00afc247f29b21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152056 Malicious code in aji-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d16107341bfc5656c1cfa808328a74267edf7dca8db3a69daecaeb187194436 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150885 Malicious code in @miptaa02/pob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f77e51168e10ac34beaffa6f0743196c2845adfb9ebd8a9db6ca6ff858db46b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150640 Malicious code in @miptaa02/fhfdd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f36ac86db504976833359cc15098977d71a32fb90ff71ca54aaf82988e6de61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162853 Malicious code in nokire-lokcek94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6f8ac03e67e6eb86106be706ffa48f39b66976880734632949b29357f0f887f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163732 Malicious code in nudela-afogshaf-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3be3b8361362527e379b83ce7406940345b39edf795c4ba81bb0e05283302db6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170146 Malicious code in upilka-luzimu-kijnuni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46fb62bf7672dfab4030197b02daefa436aea365960994ab590be6df853fbb9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155906 Malicious code in ican-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64ed1992ff41213ad63b856306289da75b4aae10905cdfe53416ad3de3717af1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161279 Malicious code in nabila-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0e1732ea3c88dd80a5800e4790885f46ffb8c22684eb2b1afe8514704bee237 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...