MAL-2025-156488 Malicious code in inal-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f0f5f6cd5aed2b61efd9ed00b62e010215fca50df35eb300826e8f2ede51f2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170581 Malicious code in yuda-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f29e1d1514ef9c87abf20b76b634abc2f49607bac1e554bb06e30753d00a3b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150056 Malicious code in @mipta1/ikusho (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b65bc35be347c59e24a9508c70a17deda32ebd2b9b560a0669fce0ebb435a1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153858 Malicious code in bitha-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b32466ed8d1f464e0815f193359e8a58df5a76e7f67ddb2c23dfc958900ffe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157873 Malicious code in kupai-lukoniuta-igavugukafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b165c921c3aaab58a1ee49eaa0b2fe67b3055389923c13e3c54814a429efa707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170311 Malicious code in verify-ain-ukasiamun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57254a196b752e0346a9a7c461156641289aed3989d4166fddb5e58b9679af7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168113 Malicious code in tealove-aruma9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da210d90efa282fe8160756200afd1912cd237e0a7fb0f045501ed5303605f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164026 Malicious code in parwo-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0540e757d5963819aea61ba94b46f8eb9a54cfa37482be79e9a3f4c53a7a7e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155780 Malicious code in hariyono-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a56b0c372a56a1da4fffea05abb8e087c34dc8a274382fa09c8e171a83248da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162074 Malicious code in nitaus-r2ff-dseff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faae13436883f310509584486ed71c61e21b6042d49f9907c9f252d6dac60197 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170358 Malicious code in verify-ayali-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6e95bdf4d9f01f6daf8d19a3fc7389e5cf3af53f614cd0e5b4aeedc3a4d1552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161070 Malicious code in musta-batada-nitru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb80c61e2b8db360fb0cdcc18e35f12290e3868410c18b307b01abfc5a2b8044 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152212 Malicious code in alfiansyah-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a96999eb79abb43c51922173f055cac4626b2741eb720bf0202c427ea6fb2a4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161947 Malicious code in nasrul-poke56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e4dd4f60ec4031399b75e83900c54996968d4a92a84246463dfcb79debaf48a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153417 Malicious code in avminh-afi-famanauog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 641d1855b4b90f8580348f92ff0171fa84bd7c1552288f02238a790d654c651c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167012 Malicious code in teagood-lokina47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adeee0c7bc9215d63ee606fcf4b01e3819fc506a56f326176c2c53792d51e258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170451 Malicious code in verify-tact-busuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 055dcaf61fa7df89bc9f23a96a1ab707d28e2edb3b97da5aa026f73a6f4a9910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150553 Malicious code in @miptaa02/bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 437e4049a7a387c1744ccf8a920fa0182d62caa8896a0b266deb69a034fd0fb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166228 Malicious code in suharta-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dabf70a1c4c80a397bb902293546cc17cb3063791909c3d3fcfeaa29040d5233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150293 Malicious code in @mipta1/tyua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d313664b07ab718c4effe676ae862a48f5f52d93e8cb2a4893155bfca998a087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...