MAL-2025-155199 Malicious code in fitrok-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53e2935152789a2221d7a6e006fbbe00509d62768b9fd68d50f9a96904d8e358 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166468 Malicious code in sunderlan-uylud-vamuiubaknauin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deef4566ee93db2a10596ec5e6fd1c3c1b45269a30ce413399867813627b693a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153579 Malicious code in avomainah-frauu-faqida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae338c565abcfdf16cfeb3869b9875acd4a1b80f651366626b4670aba4e5cd98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156846 Malicious code in iqbal-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e67b98746e9d7d4eca2ffd7af447c1986ceeed1a2c1b6872d1274782cbb78921 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157449 Malicious code in kapovfino-sagfa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc322f8778f90b4f80bc08fa7f0609c2ece2793bdf451eb04afc1c6690b2227 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152945 Malicious code in astia-alabki-malolosiskaiafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e69d23f1668caaa8f86d1859b3bc70acd1717a0c8b41c00a190ea39c373fb4f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158248 Malicious code in lintang-tea84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8889aae0a2cb692b7b5d133ab7dc867fd8e94b96315e837f75340ea78b9edf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151122 Malicious code in abeh-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c879be3a43c608e1bda997c9255ea5cd18ab018edebe1867e61f407d568dd4d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165684 Malicious code in saku-au-idun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c7fe4e1afb2b84262c45dfe7bb5f67974fafb8ae0683a85bda3f6e2106cf21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160298 Malicious code in messi-buysa-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b69df1a1c62ebd0aa09385ea9961018e8acea1c2c2e6d7a64967ad001faab8ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156904 Malicious code in irashi-sea-swe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d758cfd20ad63f61a4a784d7f23d8dcae49675468821457380da4f989b896c9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155962 Malicious code in ican-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef676b06f9f9a8886a6298ac13763ff32478d8310363895b172282ec2b28ce4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160753 Malicious code in muda-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16153529fc5d8e5e18a815e95539df4aabe16c5bf790dfd9d0f92bba5a909932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150916 Malicious code in @miptaa02/rgmu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbcc7250e2cd1d267f056dabff3a90dfc75408ff9dc4368d3de4a9f7913a5270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156322 Malicious code in inagi-vma-nuagbarifvua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d57602be73c1689a9f7448f5f0059c89d28330c2784e41e592894de100851299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168508 Malicious code in tealove-nice3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 388103a90964a2680badc7d8c2a5495e5bf7fb3b33c03a9725e12736cf0ec9c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153742 Malicious code in billa-88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6028631a31c8cd1a77bcda9320c50530b8dc5ad827ac78e84c6a86f30edc0421 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165369 Malicious code in sabua-muhufafyu-tadamafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d333264cdf7968e844260aaf92b833e31930ba105e2a00a5ab16fa41cc7fdf31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154643 Malicious code in digo-kaimoi-aiokaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19197a090512953cf6bc648fd007b27dac533b786a1b66d830bb232ad4651619 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160943 Malicious code in munir-terd-tun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fdbd28c086638b2a48a5220dbcc9aa8eb4e4aa77dd84d7af9feb53615f15bee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...