MAL-2025-165028 Malicious code in rival-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6689399b0d8a962300eb6924306e8bc0996c4d21d8bce88112c91f38c5c2f72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156746 Malicious code in inufi-gobai-jgr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 763b6adca64507dfd46c313b5072f7fcd26a20c08bb43e571f9b7dacaa7576ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163798 Malicious code in nudela-ofgaf-gafjsaaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50f4c95b9d7da76bd617f6a3e3b712456744d01bbf17dfbd2c62845b1a3e3420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156588 Malicious code in intan-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 391815ce122232fa9b451f7bd8dce168a324f19e7f76d8aadcf01671e945a7e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150846 Malicious code in @miptaa02/mqhgf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dfa837e3c6306b8d4577b9392b9d5461abce426d3a011d08561479a225726d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165123 Malicious code in riyanto-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c3a8c488566dea543440f631f560d6f0a47563b00e90cf9d2a458c350beb09f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169957 Malicious code in uinsu-lot-babim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0266d9c5dbee22fe6ab8a6b7d784e852f691d2aba1af515519f46ea507dcd92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155779 Malicious code in hariyono-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef56a25514670aa8a339ee8f28b52ee0f340fe9830e3d7f08653f84d35d0bd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163432 Malicious code in nokire-sekiya42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a4ffd23fcf5189972c09c5722034864228d579ec6dd296257e179554db125a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155305 Malicious code in gifa-otatu-umia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b67af4b750fa579c71ec775eae83ceb0f2b6291683a6634bf7e0e39a2a1ea5c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152715 Malicious code in arif-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ee57746a3c389371f9ca2364f6fcf5cf7cc24daea3600689e4683a5e90e078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153665 Malicious code in billa-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d0785cc17957bc187c9b59dd34b7cff516c1cd0222618e29de555cf9e71b539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154560 Malicious code in dian-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a02a8e070f52ed2cd1632e524ed19e519a0bf7ff26f8a60ebd52c4b3a71bfcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151300 Malicious code in abibua-moban-ataymuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aee39d865136932a3a481bfcf34f71e622ece8852687aca2aa7f4ab0e277418 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165370 Malicious code in sabua-muhufafyu-tadamai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5eb5b9856a6152b96896581ed7e75b4b8f2b068b5fbd8ed6567b7a4096a32e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152570 Malicious code in alvito-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49cce5b61f7dcae6afbf26b863524ec329884e9c322de3fb9ea4237edea0b680 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160394 Malicious code in messi-urt-efdsdus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be622d5796414a3484d70dec7b9cc7f0aef2d41a3c7ea81c8d57d46209938f6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170032 Malicious code in uinsu-loti-nalasui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3474ae4c0c82589fca1bb5e2f0213db0ea43731149582d0bc03a831cd698bf54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162669 Malicious code in nokire-kilua76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9e70f019bb0a2efe9adb5eeba8d48860863a6f0d1d6eee76ca59194ec32932a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160409 Malicious code in miftaiky-future-valley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b82a9cbc3099fff3edb65915c4b9c54e6abab404146d23f676024f0c94dbf27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...