MAL-2025-164525 Malicious code in prayoga-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector defdced9386d2c9b85d911ded727103cee918b553c45500871f879d06e2c0617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157846 Malicious code in kuinsu-uyilu-vilanakun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac7295ec4f48ef086c60a4683ee58b9972b446c89b9f7fe36f70efbbf6840b43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155126 Malicious code in fitra-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4229845ed27d18cdb273f4952462663cceeae86ce93393c7170d5a00435141d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162908 Malicious code in nokire-loklok53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 424f6f3213b272d9375d86f13347bcd2c9394c7bd6425058c513e284bcd54826 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169499 Malicious code in uaragifa-afaoti-urufuayo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2eb94caa02d906f44003c219f716a9a826bcdd4d59e71b4da5f5a540622f744 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168449 Malicious code in tealove-nanami20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee19211fce23f4c8f2479ee02e030bb0a0c15595a5af3e8f1a0c42b6ea2d168c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154605 Malicious code in dian-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e5cd3e314f699d6d3b04324a896998cdeffe83cfd404917bbf22171eea1b123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167048 Malicious code in teagood-lokina8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 859f938066546dea16326f043911a1608ad527ce6ea59340129cbe0c382b1757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167674 Malicious code in teagood-namakai21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d1684dacd4e5a1bb7df5e928d7cdbedd351a8c2efa4d669581bb5af7ef1dc4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170422 Malicious code in verify-ayisali-gufaluanais (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4100232b014005d2e83bc4e966c38192f3af2ad75c0266b739debd323849e50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166810 Malicious code in teagood-cuekin44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3857960a7b5e4e13601965b288e1216f784c37511274584763c29ac6f2c145f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164302 Malicious code in pitra-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d7c2fe689d22727443013fdad01ed5a6a92c9559e75cb675fb52d7d9a5266a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160877 Malicious code in munir-butya-bsesr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d50de89880494382de69ac9b97089e100a3614fb991f3dab3781adf919f6689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149923 Malicious code in @mipta1/ajus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67fab0755d795d4220f358018a006f47dea0647281bcf3cb5bab00e6ed481e90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154554 Malicious code in dian-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d351bec969408aeb9ad7239c562832e44b336c9f60639dabe5a959d768eefda7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157464 Malicious code in kapvino-siaaiama-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c36d7224f5335835cfaaa7f2bd5b9bc337b7b00538409e08fdd33923e1e9f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159171 Malicious code in makan-aiamoba-iufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f7aa3a8fe1780fc45bb4930a3340913c93f63e12c2999425a32670cf68e0f57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151752 Malicious code in aciyua-idust-dajuoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7d006814f57d6f9a767516ee751c43977c4e3e5cd2ca5dd2a160c4768c15519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161940 Malicious code in nasrul-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 230b7ddea62ac2c547d9e9365c9cd21c2ea26e3c1b21bb7d0e6b59995a0196db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156166 Malicious code in ilal-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90524f1a7811b86e041e73395f7d844803f1834e21080f379f9392b2c83a4434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...